CVE coverage
View on NVD →
CVE-2000-1209
CVSS 10.0
8 detections found
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | GPL SQL sa login failed | rev 11 | 2024-03-08 |
| suricata | GPL SQL sa login failed | rev 12 | 2024-03-08 |
| suricata | GPL SQL sa brute force failed login attempt | rev 5 | 2024-03-08 |
| suricata | GPL SQL sa brute force failed login unicode attempt | rev 5 | 2024-03-08 |
| snort | GPL SQL sa brute force failed login unicode attempt | rev 4 | 2012-09-12 |
| snort | GPL SQL sa login failed | rev 10 | 2012-09-12 |
| snort | GPL SQL sa login failed | rev 11 | 2012-09-12 |
| snort | GPL SQL sa brute force failed login attempt | rev 4 | 2011-12-01 |