CVE-2000-1209 in the critical feed json
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE)…
published 2002-08-10 24 y ago modified 2026-06-16 4 mo ago also EUVD-2000-1194
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 87.3%
- EPSS 87.3% chance of exploitation in 30 days, percentile 99.7%
- public exploits
- 4
- Metasploit, Exploit-DB
Summary
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
Patch / fix
- kb.cert.org/vuls/id/635463 advisory
- iss.net/security_center/static/1459.php advisory
Timeline
- First public exploit (Metasploit exploit/windows/mssql/mssql_payload)
- Published
Exploit prediction
87.31% chance of exploitation in the next 30 days, higher than 99.7% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/windows/mssql/mssql_payload Microsoft SQL Server Payload Execution metasploit exploit, excellent rank, 2000-05-30
- Metasploit exploit/windows/mssql/mssql_payload_sqli Microsoft SQL Server Payload Execution via SQL Injection metasploit exploit, excellent rank, 2000-05-30
- EDB-16395 Microsoft SQL Server - Payload Execution (Metasploit) remote, 2010-12-21
- EDB-16394 Microsoft SQL Server - Payload Execution (via SQL Injection) (Metasploit) remote, 2011-02-08
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
kb.cert.org
/vuls/id/635463
third-party-advisory, patch, us-government-resource
-
iss.net
/security_center/static/1459.php
vdb-entry, patch, vendor-advisory
-
support.microsoft.com
/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418
vendor-advisory
-
support.microsoft.com
/default.aspx?scid=kb%3BEN-US%3Bq321081
vendor-advisory
-
osvdb.org
/3570
vdb-entry
-
securityfocus.com
/bid/4797
vdb-entry
-
marc.info
/?l=bugtraq&m=96333895000350&w=2
mailing-list
- microsoft.com /security/security_bulletins/ms02020_sql.asp
-
marc.info
/?l=bugtraq&m=96644570412692&w=2
mailing-list
-
online.securityfocus.com
/archive/1/273639
mailing-list
-
marc.info
/?l=bugtraq&m=96593218804850&w=2
mailing-list
-
security-archive.merton.ox.ac.uk
/bugtraq-200008/0233.html
mailing-list
Sources
- CVE List CVE-2000-1209
- NVD CVE-2000-1209
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.