Vulnerability in Microsoft Msde
CVE-2002-0642
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.2 (High). Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.497 (98.9th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.497 · newest: 0.497 · change: 0.000
Affected products
- Microsoft Msde — versions 2000
- Microsoft SQL Server — versions 2000
References
- www.cert.org/advisories/CA-2002-22.html (US Government Resource, third-party-advisory)
- docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034 (vendor-advisory)
- www.kb.cert.org/vuls/id/796313 (US Government Resource, third-party-advisory)
- www.iss.net/security_center/static/9523.php (vdb-entry)
- www.securityfocus.com/bid/5205 (vdb-entry)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:1025 (signature, vdb-entry)