Password Vulnerability in SQL 2005 and 2000

  • Steve Jones - Editor (9/4/2009)


    However since so many people use the same pwd on other systems, getting the hash from SQL and cracking it (or from memory), could be an issue in other places.

    Which on SQL 2000 was not all that hard to do if someone got their hands on the master database (or a backup thereof)

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • This just illustrates one more reason to prefer integrated authentication.

    If I had a SQL Server login which was protected by the same strong password used for other things then I would probably be quite concerned.

    Paul

Viewing 2 posts - 16 through 17 (of 17 total)

You must be logged in to reply to this topic. Login to reply