CVE-2002-1872

HIGH 7.5CVE-2002-1872 · Published 31/12/2002 · updated 16/06/2026

In short

CVE-2002-1872 is a HIGH (CVSS 7.5) vulnerability affecting sql server (microsoft).
Chance of exploitation in the next 30 days (EPSS): 7.0%, higher than 94.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sql server microsoft	`= 2000= 6.0= 6.5= 7.0`	No fix yet

Description

Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.

References

online.securityfocus.com/archive/1/298361 · Broken Link
iss.net/security_center/static/10542.php · Broken Link
nextgenss.com/papers/tp-SQL2000.pdf · Broken Link
securityfocus.com/bid/6097 · Broken Link

More vulnerabilities in sql server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free