CVE-2000-1209

high

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including thir…

Vendor / product: Compaq — insight manager

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.

CVSS

10.0

10.0 (CVSS v2.0)

AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity source: NVD CVSS v2.0 (nvd@nist.gov)

Timeline (UTC)

Published: 2002-08-12 04:00

Modified: 2026-11-11 23:10

NVD status: Modified

Last synced 3 hours ago

Verified against the source API 2026-11-11 23:12 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

compaq / insight_manager 7.0

compaq / insight_manager_xe 1.1, 1.21, 2.1, 2.1b, 2.1c, 2.2

microsoft / data_engine 1.0

microsoft / msde 2000

Weakness classification (CWE)

NVD-CWE-Other

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: http://www.iss.net/security_center/static/1459.php

Patch / mitigation: http://www.iss.net/security_center/static/1459.php

Patch / mitigation: http://www.kb.cert.org/vuls/id/635463

Patch / mitigation: http://www.iss.net/security_center/static/1459.php

Patch / mitigation: http://www.kb.cert.org/vuls/id/635463

References

http://marc.info/?l=bugtraq&m=96333895000350&w=2 cve@mitre.org
http://marc.info/?l=bugtraq&m=96593218804850&w=2 cve@mitre.org
http://marc.info/?l=bugtraq&m=96644570412692&w=2 cve@mitre.org
http://online.securityfocus.com/archive/1/273639 cve@mitre.org
http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html cve@mitre.org
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418 cve@mitre.org
http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081 cve@mitre.org
http://www.iss.net/security_center/static/1459.php cve@mitre.org
http://www.kb.cert.org/vuls/id/635463 cve@mitre.org
http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp cve@mitre.org
http://www.osvdb.org/3570 cve@mitre.org
http://www.securityfocus.com/bid/4797 cve@mitre.org
http://marc.info/?l=bugtraq&m=96333895000350&w=2 af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=bugtraq&m=96593218804850&w=2 af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=bugtraq&m=96644570412692&w=2 af854a3a-2127-422b-91ae-364da2661108
http://online.securityfocus.com/archive/1/273639 af854a3a-2127-422b-91ae-364da2661108
http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html af854a3a-2127-422b-91ae-364da2661108
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418 af854a3a-2127-422b-91ae-364da2661108
http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081 af854a3a-2127-422b-91ae-364da2661108
http://www.iss.net/security_center/static/1459.php af854a3a-2127-422b-91ae-364da2661108
http://www.kb.cert.org/vuls/id/635463 af854a3a-2127-422b-91ae-364da2661108
http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/3570 af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/4797 af854a3a-2127-422b-91ae-364da2661108

Data sources

NVD CVE API 2.0 — fetched 2026-11-11 23:12 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores