CVE-2000-0402

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: May 30, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-04035.0The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host CVE-2000-04045.0The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser CVE-2000-040510.0Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.CVE-2000-04062.6Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to ste CVE-2000-04077.2Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.CVE-2000-04085.0IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file CVE-2000-04093.7Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user import CVE-2000-04105.0ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that CVE-2000-04115.0Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.CVE-2000-04127.5The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbit CVE-2000-04135.0The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML,CVE-2000-04144.6Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.