Description

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.

Remediation

References

CVE-2000-0402

Related Vulnerabilities

Magento CVE-2019-7895 Vulnerability (CVE-2019-7895)

WordPress Plugin Booster for WooCommerce Multiple Vulnerabilities (5.6.6)

Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36290)

Internet Information Services Other Vulnerability (CVE-2000-0246)

WordPress Plugin YITH WooCommerce Zoom Magnifier Cross-Site Scripting (1.1.8)

Severity

Low

Classification

CVE-2000-0402

Tags

Missing Update Known Vulnerabilities