Re: ANNOUNCEMENT: New SQL Server security tool - SQL Server 2000 Scan Tool

From: neo techopolis (ne0@collusion.org)
Date: 01/30/03 

From: ne0@collusion.org (neo techopolis)
Date: 30 Jan 2003 13:58:41 -0800

It only scans the HOST? Are you kidding? You've had DAYS to work on
this and you produce this utility. There are tons of REAL tools out
there to help diagnose vulnerability posture. Try eEye's Sapphire
worm scanner. (http://www.eeye.com/html/Research/Tools/SapphireSQL.html)
The freeware version scans 256 IP's at a time. HFNetCheck has a
similar scanner but it only checks registry keys (eg you must have
administrative priv's). eEye's is the only one I know of that figured
out how to do this w/out admin priv's and it's a bit more accurate

"Jerry Bryant [MSFT]" <jbryant@online.microsoft.com> wrote in message news:<OgkKKfHyCHA.2916@TK2MSFTNGP09>...
> Please read below for information about this tool. For discussions on this
> tool, please go to:
>
> microsoft.public.sqlserver.securitytools
>
> --
> Regards,
>
> Jerry Bryant - MCSE, MCDBA
> Microsoft IT Communities
>
> Get Secure! www.microsoft.com/security
>
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
> "Euan Garden[MS]" <euang@online.microsoft.com> wrote in message
> news:uKNPW2CyCHA.2196@TK2MSFTNGP10...
> > SQL Server 2000 SQL Scan Tool (SQL Scan)
> > This utility scans an individual computer, a Windows domain, or a range of
> > IP addresses for instances of SQL Server 2000 and MSDE 2000, and
> identifies
> > instances that may be vulnerable to the Slammer worm. SQL Scan runs on
> > computers running Windows 2000 or higher and can identify instances
> running
> > on Windows NT 4.0, Windows 2000, or Windows XP.
> >
> > http://www.microsoft.com/sql/downloads/securitytools.asp
> >
> > Please direct any questions you have on this tool to
> > microsoft.public.sqlserver.securitytools or to Microsoft Product Support
> > Services.
> >
> > --
> > -Euan
> >
> > Please reply only to the newsgroup so that others can benefit. When
> posting,
> > please state the version of SQL Server being used and the error
> number/exact
> > error message text received, if any.
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >
> >
> >

Relevant Pages

  • Re: ANNOUNCEMENT: New SQL Server security tool - SQL Server 2000 Scan Tool
    ... > This posting is provided "AS IS" with no warranties, and confers no rights. ... >> computers running Windows 2000 or higher and can identify instances ... >> please state the version of SQL Server being used and the error ... >> error message text received, ...
    (microsoft.public.security)
  • Re: ANNOUNCEMENT: New SQL Server security tool - SQL Server 2000 Scan Tool
    ... > This posting is provided "AS IS" with no warranties, and confers no rights. ... >> computers running Windows 2000 or higher and can identify instances ... >> please state the version of SQL Server being used and the error ... >> error message text received, ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Cannot connect in mixed mode after installing SQL2K on client
    ... First what is the error message that the application generates? ... If you attempt to create an ODBC DSN from your machine to the SQL Server, ... This posting is provided "as is" with no warranties and confers no rights. ...
    (microsoft.public.sqlserver.connect)
  • Re: xcopy deployment to sql server DTS package in restricted envir
    ... Try using Run As with the DTS package. ... William Vaughn ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Hitchhiker's Guide to Visual Studio and SQL Server ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Which Method to Create a Database Do I Use?
    ... when I was working on the team) to get rights management tools integrated ... Hitchhiker's Guide to Visual Studio and SQL Server ... actually be able to connect to the database. ...
    (microsoft.public.dotnet.framework.adonet)