Re: My SQL 7 server was hacked through to store files onto. Please help

From: toonanimator (toonanimator@excite.com)
Date: 12/26/02 

From: "toonanimator" <toonanimator@excite.com>
Date: Thu, 26 Dec 2002 13:44:23 -0500

I need more information and then I can answer your question
Firewall?
Web Server?
Ports open?
FTP?
IIS version
SA login being used for SQL (password blank?)
Inside and outside routers?
Terminal Services?
Telnet?

"scuby" <scuby@cove.net> wrote in message
news:065901c2ad0a$936eb720$d7f82ecf@TK2MSFTNGXA14...
> My SQL 7 sp1 server on windows 2000 was hacked through
> last night. there was a folder made under the winnt
> directory and then it was filled with mp3's, music,
> video's and all sorts of stuff. How would that person get
> through to do that? Could he have hacked in through SQL?
>
> Thanks in advance!
>
> Mike

Relevant Pages

  • RE: Login failure from asp.net delegation
    ... Check out SQL Server BOL "Security Account Delegation" You need to do more ... than just check "Integrated Windows ... the same principles apply to IIS. ... | I have not added a login to the database since i thought it passes in the ...
    (microsoft.public.sqlserver.security)
  • Login failure from asp.net delegation
    ... We want to use windows 2000 User auth to query sql 2000 using security ... checked "Integrated Windows Auth" in IIS and have added this to web.config. ... I have not added a login to the database since i thought it passes in the ...
    (microsoft.public.sqlserver.security)
  • Re: Does SQL Server Compact 3.1 support multi connection?
    ... Just wanted to add a final note that, though it might be ok to run SQL CE ... All apps and web server, SQLCE 3.1 run on the same machine. ... But I'm meaning simultaneous multiple connections from apps and web ...
    (microsoft.public.sqlserver.ce)
  • Re: Does SQL Server Compact 3.1 support multi connection?
    ... It's the point that SQL CE not designed for the situation like a web server ... And we expect worst case is like 10 connections. ... But I'm meaning simultaneous multiple connections from apps and web ...
    (microsoft.public.sqlserver.ce)
  • tracing web service calls
    ... Our three tier web application is "pausing" under test loading (IIS 6.0 ... the W3WP.exe on both the web server and middle tier drops to zero for ... No SQL database blocking. ...
    (microsoft.public.dotnet.framework.webservices)