The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2000-05-29 21:00
Updated : 2018-10-12 14:29
NVD link : CVE-2000-0402
Mitre link : CVE-2000-0402
JSON object : View
CWE
Products Affected
microsoft
- sql_server