Microsoft SQL Server Enterprise Manager Password Disclosure Vulnerability

Bugtraq ID:	1466
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 11 2000 12:00AM
Updated:	Jul 11 2000 12:00AM
Credit:	This vulnerability was discussed in an update to the Microsoft Security Advisory MS00-041.
Vulnerable:	Microsoft SQL Server 7.0 - Microsoft BackOffice 4.5 - Microsoft BackOffice 4.5 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0
Not Vulnerable:

Microsoft SQL Server Enterprise Manager Password Disclosure Vulnerability

Microsoft SQL Server 7.0 Enterprise Manager is vulnerable to a password disclosure vulnerability similar to that described in BugTraq ID 1292. The Registered Servers dialogue can contain a password field with the password "hidden" by asterisks. It is trivial to obtain the otherwise unprotected password; a number of free utilities exist which can accomplish this.

Microsoft SQL Server Enterprise Manager Password Disclosure Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Microsoft SQL Server Enterprise Manager Password Disclosure Vulnerability


Microsoft SQL Server 7.0

• Microsoft DTSUIa
  Alpha
  http://download.microsoft.com/download/sql70/DTSPWFix/7.0/ALPHA/EN-US/ DTSUIa.exe


• Microsoft DTSUIi
  Intel
  http://download.microsoft.com/download/sql70/DTSPWFix/7.0/WIN98/EN-US/ DTSUIi.exe

Microsoft SQL Server Enterprise Manager Password Disclosure Vulnerability

References:

• Frequently Asked Questions: Microsoft Security Bulletin (MS99-041) (Microsoft)
  
• Microsoft SQL Server DTS Password Disclosure Vulnerability (SecurityFocus)