CVE-2000-1209

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.

• http://marc.info/?l=bugtraq&m=96333895000350&w=2
• http://marc.info/?l=bugtraq&m=96593218804850&w=2
• http://marc.info/?l=bugtraq&m=96644570412692&w=2
• http://online.securityfocus.com/archive/1/273639
• http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418
• http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081
• http://www.iss.net/security_center/static/1459.phpPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/635463Patch, Third Party Advisory, US Government Resource
• http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp
• http://www.osvdb.org/3570
• http://www.securityfocus.com/bid/4797
• http://marc.info/?l=bugtraq&m=96333895000350&w=2
• http://marc.info/?l=bugtraq&m=96593218804850&w=2
• http://marc.info/?l=bugtraq&m=96644570412692&w=2
• http://online.securityfocus.com/archive/1/273639
• http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418
• http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081
• http://www.iss.net/security_center/static/1459.phpPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/635463Patch, Third Party Advisory, US Government Resource
• http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp
• http://www.osvdb.org/3570
• http://www.securityfocus.com/bid/4797

Published

Aug 12, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2000-1203Lotus Domino SMTP server 4.63 through 5.08 allows remote att…
• CVE-2000-1204Vulnerability in the mod_vhost_alias virtual hosting module …
• CVE-2000-1205Cross site scripting vulnerabilities in Apache 1.3.0 through…
• CVE-2000-1206Vulnerability in Apache httpd before 1.3.11, when configured…
• CVE-2000-1207userhelper in the usermode package on Red Hat Linux executes…
• CVE-2000-1208Format string vulnerability in startprinting() function of p…
• CVE-2000-1210Directory traversal vulnerability in source.jsp of Apache To…
• CVE-2000-1211Zope 2.2.0 through 2.2.4 does not properly perform security …
• CVE-2000-1212Zope 2.2.0 through 2.2.4 does not properly protect a data up…
• CVE-2000-1213ping in iputils before 20001010, as distributed on Red Hat L…
• CVE-2000-1214Buffer overflows in the (1) outpack or (2) buf variables of …
• CVE-2000-1215The default configuration of Lotus Domino server 5.0.8 inclu…