« Volver al listado

CVE-2000-1209

Estado: ModificadaAlta (10)—

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Compaq — Insight ManagerCompaq — Insight Manager XEMicrosoft — Data EngineMicrosoft — Msde

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2000-1209",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-08-12T04:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=96333895000350&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=96593218804850&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=96644570412692&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://online.securityfocus.com/archive/1/273639",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/1459.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/635463",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/3570",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/4797",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=96333895000350&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=96593218804850&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=96644570412692&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://online.securityfocus.com/archive/1/273639",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/1459.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/635463",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/3570",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/4797",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The \"sa\" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida."
    }
  ],
  "lastModified": "2026-06-16T21:53:23.207",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:compaq:insight_manager:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "875427C5-D74E-4299-BD02-051D3D052F2F"
            },
            {
              "criteria": "cpe:2.3:a:compaq:insight_manager:7.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27B2FE40-2B7A-4707-86EF-FD7C6E2FEE3A"
            },
            {
              "criteria": "cpe:2.3:a:compaq:insight_manager_xe:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "034C9386-7576-4313-815F-6C0DFB90C38A"
            },
            {
              "criteria": "cpe:2.3:a:compaq:insight_manager_xe:1.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "803B702A-3D4D-4438-A182-B181BEA00270"
            },
            {
              "criteria": "cpe:2.3:a:compaq:insight_manager_xe:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87261CA0-1226-46EA-9725-23DFBB443067"
            },
            {
              "criteria": "cpe:2.3:a:compaq:insight_manager_xe:2.1b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71C976B5-5B6C-40DC-8C9E-10283B2BCA29"
            },
            {
              "criteria": "cpe:2.3:a:compaq:insight_manager_xe:2.1c:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36FEFBCD-D125-49B9-804D-6F013E7C5937"
            },
            {
              "criteria": "cpe:2.3:a:compaq:insight_manager_xe:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C4C2153-508E-4A2A-8EFC-A2BA37FF9DBC"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F455C373-A9F7-47F9-828E-DEE2C8CC6545"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:msde:2000:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FF06B44-FC10-49CD-954E-9C4058731A2A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}