漏洞标题
N/A
漏洞描述信息
"sa 账户在(1) Microsoft SQL Server 2000、(2) SQL Server 7.0 和 (3) Data Engine (MSDE) 1.0 上安装了默认的空密码,包括使用这些产品的第三方软件包,如(4) Tumbleweed Secure Mail (MMS)(5) Compaq Insight Manager 和 (6) Visio 2000,这允许远程攻击者获得权限,就像 Voyager Alpha Force 和 Spida 这样的病毒所利用。"
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Microsoft MSDE/SQL Server 2000桌面引擎默认配置空口令漏洞
漏洞描述信息
Microsoft SQL Server Desktop Engine(MSDE)是一款Microsoft用来提供数据库管理服务的产品,Microsoft SQL Server 2000 Desktop Engine是一款Microsoft分发的数据库SQL SERVER2000共享数据引擎。 Microsoft SQL Server Desktop Engine(MSDE)和SQL Server 2000 Desktop Engine默认配置存在漏洞,可导致远程攻击者以管理员权限访问数据库。 Micro
CVSS信息
N/A
漏洞类别
配置错误