CVE-2000-1139 — Hard-coded Credentials in Microsoft Exchange Server

CWE-798 — Hard-coded Credentials4 documents4 sources
Severity
7.5HIGHNVD
EPSS
6.5%
top 8.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Exchange Server
Timeline
PublishedJan 9
Latest updateApr 30

Description

The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: docs.microsoft.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2r9p-58g6-hvj9: The installation of Microsoft Exchange 2000 before Rev↗2022-04-30
▶
CVEList
CVE-2000-1139: The installation of Microsoft Exchange 2000 before Rev↗2001-01-22
▶

💥Exploits & PoCs

1
Exploit-DB
PostgreSQL 6.3.2/6.5.3 - Cleartext Passwords↗2000-04-23
▶
CVE-2000-1139 — Hard-coded Credentials in Microsoft | cvebase