CVE-2000-0402: Microsoft SQL Server

Low severity, CVSS 2.1. EPSS: 90.6% chance of exploitation in the next 30 days.

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.

Affected products

• Microsoft SQL Server: version 7.0 only

Published 2000-05-30. Last modified 2026-06-16.