CVE-2000-0772

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2000-10-20 · updated 2026-06-16

Description

The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.

Affected products

Tumbleweed Messaging Management System: 4.3, 4.5, 4.6

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0098.html
http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm
http://www.securityfocus.com/bid/1562
https://exchange.xforce.ibmcloud.com/vulnerabilities/5072
http://archives.neohapsis.com/archives/bugtraq/2000-08/0098.html
http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm
http://www.securityfocus.com/bid/1562
https://exchange.xforce.ibmcloud.com/vulnerabilities/5072

Get alerted when CVE-2000-0772 or the next vulnerability affects your stack