CVE Feed

    Dashboard / CVE / CVE-2000-1209

    CVE-2000-1209

    The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.

    Published:Aug 10, 2002
    Last Modified:Apr 16, 2026
    EPS:Aug 10, 2002
    EPSS Score:0.88435
    CVSS Score:10

    Affected Products

    Vendor
    Compaq
    Product
    Insight Manager
    Vendor
    Compaq
    Product
    Insight Manager Xe
    Vendor
    Microsoft
    Product
    Data Engine
    Vendor
    Microsoft
    Product
    Msde

    Exploits

    https://www.exploit-db.com/exploits/16395https://www.exploit-db.com/exploits/16394

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://marc.info/?l=bugtraq&m=96333895000350&w=2
    http://marc.info/?l=bugtraq&m=96593218804850&w=2
    http://marc.info/?l=bugtraq&m=96644570412692&w=2
    http://online.securityfocus.com/archive/1/273639
    http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html
    http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418
    http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081
    http://www.iss.net/security_center/static/1459.php
    http://www.kb.cert.org/vuls/id/635463
    http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp
    http://www.osvdb.org/3570
    http://www.securityfocus.com/bid/4797
    http://marc.info/?l=bugtraq&m=96333895000350&w=2
    http://marc.info/?l=bugtraq&m=96593218804850&w=2
    http://marc.info/?l=bugtraq&m=96644570412692&w=2
    http://online.securityfocus.com/archive/1/273639
    http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html
    http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418
    http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081
    http://www.iss.net/security_center/static/1459.php
    http://www.kb.cert.org/vuls/id/635463
    http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp
    http://www.osvdb.org/3570
    http://www.securityfocus.com/bid/4797

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High