High severity7.5NVD Advisory· Published Dec 31, 2002· Updated Apr 16, 2026
CVE-2002-1872
CVE-2002-1872
Description
Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
Affected products
10cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- online.securityfocus.com/archive/1/298361nvdBroken LinkThird Party AdvisoryVDB EntryVendor Advisory
- www.securityfocus.com/bid/6097nvdBroken LinkThird Party AdvisoryVDB Entry
- www.iss.net/security_center/static/10542.phpnvdBroken Link
- www.nextgenss.com/papers/tp-SQL2000.pdfnvdBroken Link
News mentions
0No linked articles in our index yet.