High severity7.5NVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026
CVE-2002-1872
CVE-2002-1872
Description
Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
Affected products
11cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*
- (no CPE)range: 6.0 - 2000
Patches
Vulnerability mechanics
References
4- online.securityfocus.com/archive/1/298361nvdBroken LinkThird Party AdvisoryVDB EntryVendor Advisory
- www.securityfocus.com/bid/6097nvdBroken LinkThird Party AdvisoryVDB Entry
- www.iss.net/security_center/static/10542.phpnvdBroken Link
- www.nextgenss.com/papers/tp-SQL2000.pdfnvdBroken Link
News mentions
0No linked articles in our index yet.