CVE-1999-1556
HighExploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry. This could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.
Risk Assessment
Local users may gain unauthorized privileges, posing a serious threat to the security of the system and data.
Recommendation
It is recommended to upgrade to a newer version of SQL Server and implement stronger password encryption methods.
Other vulnerabilities in Microsoft SQL Server 6.5
See all- CVE-2016-7249High
Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, allowing remote authenticated users to gain privileges via unknown vectors.
- CVE-2026-67643Critical
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-67631Critical
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
- CVE-2019-1068HighActively exploited
A remote code execution vulnerability exists in Microsoft SQL Server due to improper handling of internal functions. An attacker could exploit it to execute arbitrary code on the server.
- CVE-2000-0402Low
The vulnerability in Microsoft SQL Server 7.0 allows the Mixed Mode authentication mechanism to store the System Administrator (sa) account password in plaintext in a log file, which is accessible to any user.
- CVE-1999-0999Medium
Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
- CVE-2026-94512High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. The vulnerability can be exploited remotely, posing a serious threat to system integrity.
- CVE-2026-88088High
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.
- CVE-2026-88083High
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. The vulnerability can be exploited remotely without authentication, posing a serious threat.
- CVE-2026-88082High
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.
Original NVD description (English source)
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

