MS-SQL Blank Password Enumeration

From: Don Wolf (securedsite@hotmail.com)
Date: 05/27/02 

From: "Don Wolf" <securedsite@hotmail.com>
To: "Focus-MS - Security Focus" <focus-ms@securityfocus.com>
Date: Mon, 27 May 2002 15:30:28 -0400

Greetings All, a quick question for any MS-SQL folks:

How can I determine which databases have blank passwords on SQL servers with
multiple databases? I've already determined the servers which contain blank
passwords, but the tool I am using (sqlbf.c) doesn't display the individual
database, e.g. Northwind, etc. On one particular server we have 5 databases
and I need to determine which is running blank and what dept. will need to
fix it. I am asking this question assuming the SA account is not global and
is configured on each individual database?

Any assistance would be greatly appreciated.

Brian.

Relevant Pages

  • Re: SQL active - active cluster hardware design?
    ... if you can find TPC-C benchmarks to be better on Itanium, ... For x64 vs IA-64, as I said it depends a lot on how the system vendors make ... x64 servers may be sufficient. ... You will need to know number of users and databases. ...
    (microsoft.public.sqlserver.clustering)
  • Re: SQL active - active cluster hardware design?
    ... if you can find TPC-C benchmarks to be better on Itanium, ... For x64 vs IA-64, as I said it depends a lot on how the system vendors make ... x64 servers may be sufficient. ... You will need to know number of users and databases. ...
    (microsoft.public.sqlserver.clustering)
  • Re: SAN (NetApp SnapMirror) replicated Exchange databases usability
    ... to stage Exchange 2007 servers at siteB with SG's and databases that are ... This is achieved by having Exchange ...
    (microsoft.public.exchange.design)
  • Re: Best way to updat TNSNames.ora in all servers
    ... We have many unix servers running Oracle ... that be the case then I would still work to consolidate the databases ...
    (comp.databases.oracle.server)
  • RE: MS-SQL Blank Password Enumeration
    ... eEye has a free tool for doing this. ... I've been using that and Nessus to find any open servers. ... How can I determine which databases have blank passwords on SQL servers ...
    (Focus-Microsoft)