CVE-2002-0642
The registry key containing the SQL Server service account information in Microsoft SQL Server...
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
Exploit likelihood
What each source reports
NVD Score used
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
- Record
CVE-2002-0642- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
- Record
CVE-2002-0642- Updated
- 2026-11-02
EUVDEUVD-2002-0636 No score
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
- Record
EUVD-2002-0636- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7g77-29hm-pfv9 No score
The registry key containing the SQL Server service account information in Microsoft SQL Server...
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
- Record
GHSA-7g77-29hm-pfv9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0642 is a high vulnerability (CVSS 7.2) in Microsoft Msde, published July 23, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 48.1%, the 98th percentile. No source names a fixed version.
References
cert.org/advisories/CA-2002-22.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034
kb.cert.org/vuls/id/796313
iss.net/security_center/static/9523.php
securityfocus.com/bid/5205
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1025
nvd.nist.gov/vuln/detail/CVE-2002-0642
github.com/advisories/GHSA-7g77-29hm-pfv9