PT-2000-1709 · Microsoft · Money

Published 2000-10-20 · Updated 2018-10-12 · CVE-2000-0777

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Money (affected versions not specified)

Description The password protection feature of Microsoft Money stores passwords in plaintext. This allows attackers with physical access to the system to obtain the password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0777

Affected Products

Money

References · 3

• http://securityfocus.com/bid/1615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0777 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-061 · Note