CVE-2000-1209: compaq insight_manager
Vulnerability summary
CVE-2000-1209 is a high (CVSS 10.0) vulnerability in compaq insight_manager. EPSS estimates a 87.31% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 10-08-2002PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
87.31%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 87.31% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundMicrosoft SQL Server - Payload Execution (Metasploit)
Maturity: weaponized
Microsoft SQL Server - Payload Execution (via SQL Injection) (Metasploit)
Maturity: weaponized
Microsoft SQL Server Payload Execution
exploit/windows/mssql/mssql_payload
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Compaq2 products
- insight_manager7.0 | 7.0:sp1
- insight_manager_xe1.1 | 1.21 | 2.1 | 2.1b | 2.1c | 2.2
Microsoft2 products
- data_engine1.0
- msde2000
2 vendors · 4 products
References
12 links
www.microsoft.com/security/security_bulletins/ms02020_sql.aspX Refsource CONFIRM