RE: MS SQL MDF FILE

From: Sanders, Jonathan (Jonathan.Sanders_at_healthsouth.com)
Date: 03/14/05

  • Next message: Fausto Napolitano: "Re: Pen Testing capabilities of Flash Files"
    Date: Mon, 14 Mar 2005 10:49:07 -0600
    To: "Felikz" <securityfocus@felikz.net>, "Irvin Temp" <znah_irvin@yahoo.com>
    
    

    For things like this, I keep a copy of MSDE running on my laptop that I
    can attach any MDF files to. You can get it here, it's free:

    http://www.microsoft.com/sql/msde/default.asp

    YMMV...

    Jonathan

    -----Original Message-----
    From: Felikz [mailto:securityfocus@felikz.net]
    Sent: Monday, March 14, 2005 10:02 AM
    To: Irvin Temp
    Cc: pen-test@securityfocus.com
    Subject: Re: MS SQL MDF FILE

    You should be able to "attach" it to any other SQL Server, one step of
    this is to select the database owner thus giving you full access to it's

    contents.

    Irvin Temp wrote:

    >Im currently doing a VA of our MS SQL Database
    >servers.
    >I was able to download a backup of our MDF file from
    >one of the DB Server.
    >
    >When i open the MDF file using "vi" editor in UNIX,
    >the
    >file appears to be cryptic. Is there a way to decipher
    >
    >the contents of the file. I would like to show the to
    >the
    >full extent of the risks involved when an MDF file has
    >
    >been captured from a database server.
    >
    >Thanks!
    >
    >Regards,
    >
    >HY
    >

    Confidentiality Notice: This e-mail communication and any attachments may contain
    confidential and privileged information for the use of the designated recipients named above. If
    you are not the intended recipient, you are hereby notified that you have received this
    communication in error and that any review, disclosure, dissemination, distribution or
    copying of it or its contents is prohibited. If you have received this communication in
    error, please notify me immediately by replying to this message and deleting it from your
    computer. Thank you.


  • Next message: Fausto Napolitano: "Re: Pen Testing capabilities of Flash Files"

    Relevant Pages

    • Re: Show progressbar while connecting.....
      ... I've wrote a small application which attach a mdf file to a local SQL express server for reporting purposes. ... while connecting the mdf file to server I want to show a progressbar to the user, since attaching a database is time consuming and takes 10 to 20 seconds. ...
      (microsoft.public.dotnet.framework.windowsforms.controls)
    • Re: Referenced Memory Problem with Enterprise Manager
      ... Could be a bad SQL Server binary. ... sp_attach_db to narrow down if it is the .MDF file the local SS installation ... When I attempt to attach a database using the wizard in the manager, I get the following error when I click on the button to select MDF file of database to attach: ... The instruction at "0x41d53c0a" referenced memory at "0xffffffff". ...
      (microsoft.public.sqlserver.server)
    • Re: Truncate log file
      ... If it is a development environment you could just attach only the MDF file. ... It seems client has not shrink the LDF file. ...
      (microsoft.public.sqlserver.server)
    • MDF file
      ... But i cannot attach mdf file to ... beacuse my licence is limited on 4.096 mb. ... is tthere any tool to convert mdf file to mdb? ...
      (microsoft.public.dotnet.languages.csharp)
    • MDF to MDB
      ... But i cannot attach mdf file ... beacuse my licence is limited on 4.096 mb. ... is tthere any tool to convert mdf file to mdb? ...
      (microsoft.public.dotnet.languages.csharp)