Unscored CVE-2002-1872 EUVD-2002-1851GHSA-pp2f-p95f-2xhx

Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers …

Published Jun 28, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.

References

6097 vdb-entry
mssql-weak-password-encryption(10542) vdb-entry
20021102 Weak Password Encryption Scheme in MS SQL Server mailing-list
http://www.nextgenss.com/papers/tp-SQL2000.pdf