CVE-2002-0643
- State
- Published
- Severity
- Not scored
- Published
- Jul 12, 2002
- Updated
- Aug 8, 2024
- Reserved
- Jun 28, 2002
Description
The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20020711 SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a filemailing-list
- MS02-035vendor-advisory
- 20020711 SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a filemailing-list
- VU#338195third-party-advisory
- 5203vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.