VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 29, 1998· Updated Jun 16, 2026

CVE-1999-1556

CVE-1999-1556

Description

Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Microsoft/SQL Server2 versions
    cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*
    • (no CPE)range: = 6.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.