CVE-2002-1872: Microsoft SQL Server

High severity, CVSS 7.5. EPSS: 7% chance of exploitation in the next 30 days.

Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.

Affected products

• Microsoft SQL Server: version 6.0 only; version 6.5 only; version 7.0 only; version 2000 only

Published 2002-12-31. Last modified 2026-06-16.