RE: New developers anguish on Security

From: Uttam Parui[MS] (uttamkp@online.microsoft.com)
Date: 10/26/02 

From: uttamkp@online.microsoft.com (Uttam Parui[MS])
Date: Sat, 26 Oct 2002 13:27:24 GMT

Paul,

Here are some security related links that may be useful to you.

Whitepaper -SQL Server 7.0 Security
http://www.microsoft.com/sql/techinfo/administration/70/securityWP.asp

Whitepaper - Microsoft SQL Server 2000 Security
http://www.microsoft.com/SQL/techinfo/administration/2000/securityWP.asp

Security Links on MS Website
http://www.microsoft.com/SQL/techinfo/administration/2000/security.asp

Best of Luck.

Regards,

Uttam Kumar Parui
SQL Server Support Engineer, MCDBA, MCSE, MCT
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.

Are you secure? For information about the Strategic Technology Protection
Program and to order your FREE Security Tool Kit, please visit
http://www.microsoft.com/security.

Relevant Pages

  • Re: MS03-031
    ... Microsoft SQL Server 7.0 ... Microsoft SQL Server 2000 Desktop Engine ... Microsoft Security Bulletin MS03-031 ...
    (microsoft.public.sqlserver.security)
  • Re: SQL or Access DB
    ... As far as encryption goes though... ... with Sql Server you can use SQL DMO and encrypt your stored procedures ... installation - Security was absolutely critical and in most instances, ... > then we create a nice gui around this database and sell it to automotive ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Is there any way to prevent hacker trying to guess sa password?
    ... and port 1433 will not be open. ... If someone can crash SQL Server by connecting to port 1433, ... You don't need multiple security experts. ...
    (microsoft.public.sqlserver.security)
  • Re: Getting to the bottom of MSDE network connection problems ...
    ... Brilliant, Nick, especially the explanation for local network user being ... authenticated as GUEST in WinXP SP2. ... > on a desktop OS like XP (meaning that, you can not compare SQL Server ... > again and selected the security tab. ...
    (microsoft.public.sqlserver.msde)
  • [NT] SQL Extended Procedure Functions Contain Unchecked Buffers
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... SQL Server 7.0 and 2000 provide extended stored procedures, ... Several of the Microsoft-provided extended stored procedures have been ... Exploiting the flaw could enable an attacker to either cause the SQL ...
    (Securiteam)