Skip to content

CVE-2000-0402 The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Serv...

LowCVSS 2.1 EPSS 90.6% Framework module Public exploit
Published
Updated
Exploit status
Public exploit available

Description

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.

Affected products

ProductAffected versionsFixed in
Microsoft sql server = 7.0 No fix listed
Microsoft sql server = 7.0-sp1 No fix listed
Microsoft sql server = 7.0-sp2 No fix listed

References