CVE-2000-0402 in SQL Server

Summary

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Disclosure: 05/30/2000
• Moderation: VulDB entry created
• Entries: VDB-15603 (1)
• CPE: ready
• CWE: CWE-312 (Confirmed)
• Exploit: Download
• CVSS: 5.3
• EPSS: 0.78483
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-0402
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-0402
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-0402/