Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the public role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sql_server | Microsoft | 2000 (including) | 2000 (including) |
| Sql_server | Microsoft | 2000-sp1 (including) | 2000-sp1 (including) |
| Sql_server | Microsoft | 2000-sp2 (including) | 2000-sp2 (including) |