full-disclosure - Database servers on XP and the curious flaw

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <437B8678.90504@davewking.com>
Date: Wed Nov 16 19:20:43 2005
From: davefd at davewking.com (Dave King)
Subject: Database servers on XP and the curious flaw

While it still may not be "millions of people" several products come
bundled with the desktop edition of SQL Server 2000, and I'm sure many
will come with SQL Server 2005 Express.  As far as I can tell by reading
the paper (but not testing it myself) these are probably vulnerable as
well if the configuration allows the guest account access to the database.

Dave King
http://www.thesecure.net

>
> To be honest I don't think we're talking millions of people. How many
> people at home run a fully fledged RDBMS on their XP systems? Very few
> I'd guess. Besides, Simple File Sharing is documented so MS are
> educating those willing to seek information.
>