← back
CVE-2000-0402

CVE-2000-0402

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 91%
from disclosure to weapon3814 days
Published on NVDJul 12
1st PoC+3814d
metasploitMay 30
exploitation probability
91%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.