CVE-2002-0643

The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete…

published July 12, 2002

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01697 · 77.0th percentile
Published
2002-07-12T04:00Z
EPSS history
Timeline
  • 12 JUL 04:00Z
    The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete…
    cvelistv5