PT-2002-1090 · Compaq+2 · Compaq Insight Manager+5

Published 2002-08-12 · Updated 2018-08-13 · CVE-2000-1209

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2000 SQL Server 7.0 Data Engine (MSDE) 1.0 Tumbleweed Secure Mail (MMS) Compaq Insight Manager Visio 2000

Description The issue allows remote attackers to gain privileges due to the default null password of the sa account. This has been exploited by worms such as Voyager Alpha Force and Spida.

Recommendations For Microsoft SQL Server 2000, update the sa account password to a secure value. For SQL Server 7.0, change the default sa account password. For Data Engine (MSDE) 1.0, modify the sa account to use a non-null password. For Tumbleweed Secure Mail (MMS), Compaq Insight Manager, and Visio 2000, ensure that the underlying SQL server components have secure sa account passwords configured.

Exploit

Fix

Related Identifiers

CVE-2000-1209

Affected Products

Compaq Insight Manager

Data Engine (Msde) 1.0

Sql Server 2000

Sql Server 7.0

Tumbleweed Secure Mail

Visio 2000

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/mssql_payload_sqli.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/mssql_payload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16394 · Exploit
• 🔥 https://exploit-db.com/exploits/16395 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-1209 · Security Note
• http://iss.net/security_center/static/1459.php · Vendor Advisory
• http://kb.cert.org/vuls/id/635463 · Patch
• http://microsoft.com/security/security_bulletins/ms02020_sql.asp · Note
• http://securityfocus.com/bid/4797 · Note
• http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081 · Note
• http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html · Note
• http://marc.info/?l=bugtraq&m=96644570412692&w=2 · Note
• http://osvdb.org/3570 · Note
• http://marc.info/?l=bugtraq&m=96333895000350&w=2 · Note
• http://online.securityfocus.com/archive/1/273639 · Note