CVE-1999-1556
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/06/1998
Last modified:
03/04/2025
Description
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.
Impact
Base Score 2.0
7.20
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page