PT-2000-1181 · Microsoft · Sql Server

Publicado 2000-03-14 · Atualizado 2008-09-10 · CVE-2000-0199

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server version 7.0

Description The issue concerns the storage of login credentials in Microsoft SQL Server 7.0 when registered in Enterprise Manager. If the "Always prompt for login name and password" option is not set, Enterprise Manager uses weak encryption to store the login ID and password.

Recommendations For Microsoft SQL Server version 7.0, enable the "Always prompt for login name and password" option in Enterprise Manager to prevent the use of weak encryption for storing login credentials.

Exploit

Correção

Identificadores relacionados

CVE-2000-0199

Produtos afetados

Sql Server

Referências · 2

• 🔥 http://securityfocus.com/bid/1055 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0199 · Nota de Segurança