CVEvulnerability
CVE-2002-0642
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-07-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
Affected configurations
• microsoft msde 2000
• microsoft sql server 2000
References
- http://www.cert.org/advisories/CA-2002-22.html US Government Resource
- http://www.iss.net/security_center/static/9523.php www.iss.net
- http://www.kb.cert.org/vuls/id/796313 US Government Resource
- http://www.securityfocus.com/bid/5205 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1025 oval.cisecurity.org
- http://www.cert.org/advisories/CA-2002-22.html US Government Resource
- http://www.iss.net/security_center/static/9523.php www.iss.net
- http://www.kb.cert.org/vuls/id/796313 US Government Resource
- http://www.securityfocus.com/bid/5205 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1025 oval.cisecurity.org