CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2000-1209

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.896

EPSS Ranking 99.5%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2000-1209

Compaq » Insight Manager » Version: 7.0

cpe:2.3:a:compaq:insight_manager:7.0
Compaq » Insight Manager Xe » Version: 1.1

cpe:2.3:a:compaq:insight_manager_xe:1.1
Compaq » Insight Manager Xe » Version: 1.21

cpe:2.3:a:compaq:insight_manager_xe:1.21
Compaq » Insight Manager Xe » Version: 2.1

cpe:2.3:a:compaq:insight_manager_xe:2.1
Compaq » Insight Manager Xe » Version: 2.1b

cpe:2.3:a:compaq:insight_manager_xe:2.1b
Compaq » Insight Manager Xe » Version: 2.1c

cpe:2.3:a:compaq:insight_manager_xe:2.1c
Compaq » Insight Manager Xe » Version: 2.2

cpe:2.3:a:compaq:insight_manager_xe:2.2
Microsoft » Data Engine » Version: 1.0

cpe:2.3:a:microsoft:data_engine:1.0
Microsoft » Msde » Version: 2000

cpe:2.3:a:microsoft:msde:2000

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2000-1209

Products

Pricing

Contact Us