NVD

Id
79643  
Name
CVE-2002-0643  
Description
The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-07-23  
Modified Date
2016-10-17  
Seq
2002-0643  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
397275 79643 CVE-2002-0643 20020711 SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a file  View
397276 79643 CVE-2002-0643 20020711 SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a file  View
397277 79643 CVE-2002-0643 VU#338195  View
397278 79643 CVE-2002-0643 MS02-035  View
397279 79643 CVE-2002-0643 5203  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63828 JVNDB-2002-000155 Microsoft SQL Server のインストールプロセスにおける情報漏洩の脆弱性 Microsoft SQL Server には、インストール時において認証モードを「混合モード」とした場合、SQL Server の管理者のパスワードがセットアップファイルに保存される脆弱性が存在します。 CVE-2002-0643 5033 CVE-2002-0643 79643 4.6 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000155.html 2002-07-10 2007-04-01 View