PT-2002-2594 · Microsoft · Sql Server

CVE-2002-1872 · Publicado 2002-12-31 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 6.0 through 2000

Description The issue allows remote attackers to sniff and decrypt passwords due to the use of weak password encryption (XOR) when SQL Authentication is enabled.

Recommendations For Microsoft SQL Server versions 6.0 through 2000, consider disabling SQL Authentication or restricting its use to minimize the risk of exploitation until a more secure authentication method can be implemented.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2002-1872

Produtos afetados

Sql Server

Referências · 6

• http://nextgenss.com/papers/tp-SQL2000.pdf · Nota
• http://securityfocus.com/bid/6097 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1872 · Nota de Segurança
• http://online.securityfocus.com/archive/1/298361 · Aviso do Fabricante
• http://iss.net/security_center/static/10542.php · Nota
• https://t.me/cvenotify/71368 · Publicação no Telegram