Description

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.

Remediation

References

CVE-2000-0199

Related Vulnerabilities

WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Security Bypass (4.3.0)

Squid Improper Input Validation Vulnerability (CVE-2014-3609)

Oracle Database Server CVE-2011-2248 Vulnerability (CVE-2011-2248)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4586)

WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login SQL Injection (5.0.2.1)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2000-0199