Viewing 15 posts - 4,306 through 4,320 (of 6,105 total)
By the way, an excellent web-cast that's a step-by-step walk through on how an attacker scopes out and attacks a box using SQL Injection:
http://www.microsoft.com/usa/webcasts/ondemand/1765.asp
This was presented by SQLServerCentral.com's Brian...
May 22, 2003 at 10:46 am
You're piggy-backing on legitimate access. In other words, a database call that is authorized is being made. You jump in on this call and add to it.
Think of it in...
May 22, 2003 at 10:36 am
The elective you choose should probably be based on what you know the most on or are most comfortable with.
K. Brian Kelley
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server...
May 22, 2003 at 10:29 am
Though sp_start_job defaults to the public role, a user needs to be able to see the job in order to start it. A user can normally see a job if...
May 21, 2003 at 5:22 pm
I think it would be more of a best practice to do the encryption at the application level and pass to SQL Server the encrypted form of the password.
K....
May 21, 2003 at 10:13 am
First, did you mean SMTP (Simple Mail Transport Protocol) or SNMP (Simple Network Management Protocol).
If SMTP:
Yes, there's a way, but it involves having a SQL Server Agent job reading email...
May 21, 2003 at 10:11 am
Do the passwords between the two local administrators accounts match? In other words, if on box A the password is MyPassword! on box B the password would be MyPassword! as...
May 21, 2003 at 10:05 am
You're still using Windows authentication, so it's not a Mixed Mode vs. Windows only issue. It's about how the operating system goes about validating the Windows credentials. Basically, if the...
May 21, 2003 at 10:03 am
Are you doing linked server connections between the two DBs? If so, bbychkov has hit the nail on the head. You're in a double-hop situation.
Delegation under Active Directory solves...
May 21, 2003 at 9:45 am
Realized I should be as a proviso that I'm really simplifying things here...
As long as domain B trusts domain A, user can use domain A's user login on domain...
May 21, 2003 at 9:38 am
This is odd. Typically I see this when a BDC (NT 4.0) or a DC (Win2K) hasn't received the replicated password change, but it shouldn't persist unless a DC is...
May 20, 2003 at 5:25 pm
Sounds like for whatever reason it can't enumerate the groups. Unless someone else has an idea, this sounds like a PSS call to Microsoft.
K. Brian Kelley
http://www.truthsolutions.com/
Author: Start to Finish Guide...
May 20, 2003 at 12:07 pm
TargetServersRole is kind of secretive. It's there to support Multi-server administration and thus wasn't explicitly intended for someone to use to monitor jobs, but it has the permissions necessary to...
May 20, 2003 at 9:55 am
In Books Online there's a page on DBCC CHECKDB() that describes the options in more detail than I will here (so read it before running), but basically this is what...
May 20, 2003 at 9:50 am
Yup, that's true. Go with Frank's suggestion if you're going down the xp_cmdshell route. Since both SQL Server and SQL Server Agent are services, psservice is the better option over...
May 20, 2003 at 9:46 am
Viewing 15 posts - 4,306 through 4,320 (of 6,105 total)