Strix
26.1K

CVE-2000-1209

UnknownEPSS 87.31%

Last modified

CVE-2000-1209 is a vulnerability of currently unknown severity. The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.. EPSS estimates a 87.31% chance of exploitation in the next 30 days.

Description

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.

Metrics

EPSS Probability
87.31%

99.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
CompaqInsight Manager7.0
CompaqInsight Manager Xe1.1
CompaqInsight Manager Xe1.21
CompaqInsight Manager Xe2.1
CompaqInsight Manager Xe2.1b
CompaqInsight Manager Xe2.1c
CompaqInsight Manager Xe2.2
MicrosoftData Engine1.0
MicrosoftMsde2000

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2000-1209?
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
How severe is CVE-2000-1209?
Severity scoring for CVE-2000-1209 is pending analysis. The EPSS model estimates a 87.31% probability of exploitation in the next 30 days.
How do I fix CVE-2000-1209?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2000-1209?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST