VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 23, 2002· Updated Jun 16, 2026

CVE-2002-0643

CVE-2002-0643

Description

The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Microsoft/Data Engine2 versions
    cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*
    • (no CPE)range: =1.0
  • Microsoft/SQL Server7 versions
    cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*
  • Microsoft/SQL Server 2000llm-fuzzy
    Range: =2000

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.