Every CVE Search/ Get API key

CVE-2000-0654

Microsoft Enterprise Manager allows local users to obtain database passwords via the Data...

4.6 Medium

Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability.

Exploit likelihood

1.38%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.6

Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability.

Record
CVE-2000-0654
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability.

Record
CVE-2000-0654
Updated
2026-11-02
EUVDEUVD-2000-0650 No score

Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability.

Record
EUVD-2000-0650
Updated
2026-11-03
GitHub AdvisoriesGHSA-8cv8-cw5j-h98f No score

Microsoft Enterprise Manager allows local users to obtain database passwords via the Data...

Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability.

Record
GHSA-8cv8-cw5j-h98f
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0654 is a medium vulnerability (CVSS 4.6) in Microsoft Sql Server, published July 11, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.38%, the 72nd percentile. No source names a fixed version.

References

MoveEnter Open