CVE-2000-0199

Published: Mar 14, 2000Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.

Affected (1)

Products: Microsoft: Sql Server

Microsoft

1 product

Sql Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Sql Server	Version 7.0

References (2)

http://www.securityfocus.com/bid/1055

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/1055

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

Timeline

No history available yet.