CVE-2002-0642: High severity Microsoft SQL Server vulnerability
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0642?
CVE-2002-0642 has a medium severity rating due to its potential for privilege escalation in Microsoft SQL Server 2000.
How do I fix CVE-2002-0642?
To fix CVE-2002-0642, you should adjust the permissions on the SQL Server service account registry keys to ensure they are not accessible to unauthorized users.
Which software is affected by CVE-2002-0642?
CVE-2002-0642 affects Microsoft SQL Server 2000 and Microsoft SQL Server Desktop Engine (MSDE) 2000.
Can CVE-2002-0642 be exploited by local users?
Yes, CVE-2002-0642 can be exploited by local users who can access the insecure registry key to gain elevated privileges.
What type of vulnerability is CVE-2002-0642 categorized as?
CVE-2002-0642 is categorized as a vulnerability related to incorrect permission settings on a registry key.