Hacking SQL Server
Short summary:
Hacking / Hacking Exposed Windows Server 2003: Windows Security Secrets & Solutions / Scambray ...... some of the tools of the trade in SQL Server hacking. ...
Long summary:
Hacking SQL ServerPage 1CHAPTER11HackingSQLServer289Hacking / Hacking Exposed Windows Server 2003: Windows Security Secrets & Solutions / Scambray McClure / 2230614 / Chapter11P:CompHacking14ch11.vpThursday October 02 2003 3:44:18 PMColor profile: Generic CMYK printer profileComposite Default screenPage 2Hacking into web servers and replacing home pages with pictures of scantily cladfemales and clever selfingratiating quips is all fine and dandy but what can wedo about hackers intent on doing more than defacing a few pages? Sooner or lateryoull be up against an opponent intent on taking your most valuable assets either forspite or profit. What could be more valuable than the information locked deep in thebowels of your database? Employee records customer accounts passwords credit cardinformationits all there for the taking.For those companies utilizing Microsoft technologies a popular data store isMicrosofts SQL Server relational database as well as the various MSDE (Microsoft DataEngine) variants that ship with more than 220 known software packages. MSDE has become ubiquitous thanks to its price (free) and power. However since users are not usually aware that MSDE has been installed it is rare to find a wellsecured MSDE instance.Unfortunately despite all of the concerns about scalability and reliability that mostcompanies have when planning and implementing SQL Server they often overlook a keyingredient in any stable SQL Server deploymentsecurity. Its a common tragedy thatmany companies spend a great deal of time and effort protecting the castle gates andleave the royal vault wide open.Also as the SQL Slammer worm (http://www.cert.org/advisories/ CA200304.html)taught us other potential repercussions are possible when SQL Server security isneglected. When a sixmonthold SQL Server vulnerability can nearly bring the Internetto its knees two things become obvious: there are a lot of SQL Server installations outthere and no one seems to be keeping them pro ...
Source: mithras.itworld.com
Related
Files under this topic are not filed yet. Please use search bar to find other one
