NVD

Id
77441  
Name
CVE-2000-1209  
Description
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2002-08-12  
Modified Date
2016-10-17  
Seq
2000-1209  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
388800 77441 CVE-2000-1209 20000710 MSDE / Re: Default Password Database  View
388801 77441 CVE-2000-1209 20000810 Tumbleweed Worldsecure (MMS) BLANK "sa" account password  View
388802 77441 CVE-2000-1209 20000816 Released Patch: Tumbleweed Worldsecure (MMS) BLANK "sa" account password  View
388803 77441 CVE-2000-1209 20020522 Opty-Way Enterprise includes MSDE with sa <blank>  View
388804 77441 CVE-2000-1209 20000815 MS-SQL "sa" user exploit code  View
388805 77441 CVE-2000-1209 Q313418  View
388806 77441 CVE-2000-1209 Q321081  View
388807 77441 CVE-2000-1209 mssql-no-sapassword(1459)  View
388808 77441 CVE-2000-1209 VU#635463  View
388809 77441 CVE-2000-1209 http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp  View
388810 77441 CVE-2000-1209 4797  View

Related JVN