full-disclosure - [SPAM] Re: Spybot and SQL

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: m.esco at wp.pl (Jacek Barcikowski)
Subject: [SPAM] Re: Spybot and SQL

Matthew Farrenkopf wrote:

> (The MSDE engine was installed on two machines for an application we
> use, and the engine is used only locally by the application.  The
> thought never crossed my mind that the engine was misconfigured with a
> blank sa password, but on analysis it looks like that's how the
> application communicates with the database.  There's no option to add a
> password in the application, so I blocked port 1433 to the outside
> world.  Problem solved until we can talk to the vendor.)

<off_topic>
Before the installation you can set up a setup.ini file with 
DISABLENETWORKPROTOCOLS=1 configuration option in it. MSDE will not 
listen to any port, therefore cannot be accessed from the net.
</off_topic>

Best reagards,
m.esco