gsd-2000-1209
Vulnerability from gsd
Modified
2023-12-13 01:19
Details
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2000-1209",
"description": "The \"sa\" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.",
"id": "GSD-2000-1209",
"references": [
"https://packetstormsecurity.com/files/cve/CVE-2000-1209"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2000-1209"
],
"details": "The \"sa\" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.",
"id": "GSD-2000-1209",
"modified": "2023-12-13T01:19:03.614286Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2000-1209",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The \"sa\" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "3570",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/3570"
},
{
"name": "4797",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/4797"
},
{
"name": "20000710 MSDE / Re: Default Password Database",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=96333895000350\u0026w=2"
},
{
"name": "VU#635463",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/635463"
},
{
"name": "mssql-no-sapassword(1459)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/1459.php"
},
{
"name": "http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp",
"refsource": "CONFIRM",
"url": "http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp"
},
{
"name": "20000816 Released Patch: Tumbleweed Worldsecure (MMS) BLANK \u0027sa\u0027 account password",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=96644570412692\u0026w=2"
},
{
"name": "20020522 Opty-Way Enterprise includes MSDE with sa \u003cblank\u003e",
"refsource": "BUGTRAQ",
"url": "http://online.securityfocus.com/archive/1/273639"
},
{
"name": "Q313418",
"refsource": "MSKB",
"url": "http://support.microsoft.com/default.aspx?scid=kb;[LN];Q313418"
},
{
"name": "20000810 Tumbleweed Worldsecure (MMS) BLANK \u0027sa\u0027 account password",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=96593218804850\u0026w=2"
},
{
"name": "Q321081",
"refsource": "MSKB",
"url": "http://support.microsoft.com/default.aspx?scid=kb;EN-US;q321081"
},
{
"name": "20000815 MS-SQL \u0027sa\u0027 user exploit code",
"refsource": "BUGTRAQ",
"url": "http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:compaq:insight_manager:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:msde:2000:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:compaq:insight_manager_xe:2.1b:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:compaq:insight_manager_xe:2.1c:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:compaq:insight_manager_xe:2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:compaq:insight_manager_xe:1.21:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:compaq:insight_manager_xe:2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:compaq:insight_manager:7.0:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:compaq:insight_manager_xe:1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2000-1209"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The \"sa\" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "VU#635463",
"refsource": "CERT-VN",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/635463"
},
{
"name": "mssql-no-sapassword(1459)",
"refsource": "XF",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.iss.net/security_center/static/1459.php"
},
{
"name": "20000815 MS-SQL \u0027sa\u0027 user exploit code",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html"
},
{
"name": "Q321081",
"refsource": "MSKB",
"tags": [],
"url": "http://support.microsoft.com/default.aspx?scid=kb;EN-US;q321081"
},
{
"name": "http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp"
},
{
"name": "4797",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/4797"
},
{
"name": "20020522 Opty-Way Enterprise includes MSDE with sa \u003cblank\u003e",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://online.securityfocus.com/archive/1/273639"
},
{
"name": "3570",
"refsource": "OSVDB",
"tags": [],
"url": "http://www.osvdb.org/3570"
},
{
"name": "20000810 Tumbleweed Worldsecure (MMS) BLANK \u0027sa\u0027 account password",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://marc.info/?l=bugtraq\u0026m=96593218804850\u0026w=2"
},
{
"name": "20000816 Released Patch: Tumbleweed Worldsecure (MMS) BLANK \u0027sa\u0027 account password",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://marc.info/?l=bugtraq\u0026m=96644570412692\u0026w=2"
},
{
"name": "20000710 MSDE / Re: Default Password Database",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://marc.info/?l=bugtraq\u0026m=96333895000350\u0026w=2"
},
{
"name": "Q313418",
"refsource": "MSKB",
"tags": [],
"url": "http://support.microsoft.com/default.aspx?scid=kb;[LN];Q313418"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2018-08-13T21:47Z",
"publishedDate": "2002-08-12T04:00Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…