Vulnerability in Microsoft Data_engine
CVE-2002-0643
The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, inclu…
EPSS: 0.017 (74.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Data_engine — versions 1.0
- Microsoft Sql_server — versions 7.0, 2000
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (mailing-list, x_refsource_VULN-DEV)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)