CVE-2000-0777

CVE-2000-0777 describes a critical vulnerability in Microsoft Money where the password protection feature stores user passwords in plaintext. This allows an attacker with physical access to the system to easily retrieve the password, leading to complete compromise of confidentiality, integrity, and availability. With a CVSS score of 7.2 (HIGH), this local attack requires low complexity but grants full control to the attacker. While no active exploitation, public exploit code, or significant community discussion has been observed, the fundamental flaw of plaintext password storage remains a severe security risk.