2.1low
CVE-2000-0485
Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, a…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.4%
percentile 84%
Public exploits
0
none known
Summary
Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability.
Exploit prediction (EPSS)
2.39% probability of exploitation in the next 30 days, higher than 84% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Technology feeds
- Microsoft SQL Server (RSS, critical only)
References
- exchange.xforce.ibmcloud.com /vulnerabilities/4582 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/1292 · vdb-entry, x_refsource_BID, x_transferred
- docs.microsoft.com /en-us/security-updates/securitybulletins/2000/ms00-041 · vendor-advisory, x_refsource_MS, x_transferred
- securityfocus.com /archive/1/62771 · mailing-list, x_refsource_BUGTRAQ, x_transferred
Sources
- CVE List: CVE-2000-0485
- NVD: CVE-2000-0485
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.