Re: SQL Vulnerabilty Assesment

From: crazytrain.com (subscribe@crazytrain.com)
Date: 01/09/03

  • Next message: kyle@kylelai.com: "New security testing tool" 
    Date: Wed, 8 Jan 2003 19:53:09 -0500
From: "crazytrain.com" <subscribe@crazytrain.com>
To: John Madden <chiwawa999@yahoo.com>, pen-test@securityfocus.com

    John

    a short list here;

    http://www.networkintrusion.co.uk/database.htm

    And of course the excellent site devoted to MS SQL Server security;

    http://www.sqlsecurity.com/DesktopDefault.aspx

    hope something here helps!

    farmerdude

    > Hello all,
    >
    > In your experience, what would be the best all around
    > vulnerability assesment tool for MSSQL (commercial and
    > free) ?
    >
    > So far i've got the most popular commercial one's like
    > ISS Database Scanner, NGSSquirrel, VigilEnt etc...
    >
    > Thanks for the input....
    >
    > John
    >
    >
    > __________________________________________________
    > Do you Yahoo!?
    > Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
    > http://mailplus.yahoo.com
    >
    > ----------------------------------------------------------------------------
    > This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    > Service. For more information on SecurityFocus' SIA service which
    > automatically alerts you to the latest security vulnerabilities please see:
    > https://alerts.securityfocus.com/
    >
    >

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/

    Relevant Pages

    • RE: SQL
      ... Subject: SQL ... >> This list is provided by the SecurityFocus Security ... For more information on SecurityFocus' SIA service which ... >This list is provided by the SecurityFocus Security Intelligence Alert ...
      (Pen-Test)
    • RE: Insurance
      ... property--data beign deemed "intangible" for the purposes of insurance. ... for physical security testing there are often 3rd parties ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
      (Pen-Test)
    • RE: Pen-Testing Lotus Notes/Domino
      ... Subject: Pen-Testing Lotus Notes/Domino ... of document security. ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • R: Pen-Testing help (Compaq Insight & htsearch)
      ... This web server happens to be in front of their ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Re: Application & Iplanet/Apache web server vulnerability and penetration testing
      ... I don't know what to do on the web servers other than delete example ... Any suggestions on iPlanet and Apache security? ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)