Unscored CVE-2000-0485 EUVD-2000-0483GHSA-682g-mjx4-8wwv

Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, a…

Published Oct 13, 2000 · Updated Aug 8, 2024 · Assigned by mitre

Description

Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability.

References

mssql-dts-reveal-passwords(4582) vdb-entry
1292 vdb-entry
MS00-041 vendor-advisory
20000530 Fw: Steal Passwords Using SQL Server EM mailing-list