Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft SQL Server 2000注册表表项权限设置不正确漏洞(MS02-034)
Vulnerability Description
Microsoft SQL Server 2000是微软公司开发和维护的一种商业SQL数据库系统。 SQL Server 2000的默认注册表表项权限设置存在漏洞,远程可以执行查询操作的用户可能利用此问题修改下次启动SQL服务进程的权限。 在默认情况下,指定SQL服务进程所运行帐号的注册表项的权限设置不正确,能在服务器上执行SQL查询的远程攻击者可以无需管理员权限通过SQL查询修改此注册表表项,使SQL服务在下次启动时以较高的权限执行。
CVSS Information
N/A
Vulnerability Type
N/A