Browse by Tags

All Tags » Security » SQL Server (RSS)
Enabling xp_cmdshell in SQL Server 2005
xp_cmdshell is used to spawn a Windows command shell and executes a command line process by the operating system. In order to minimize the security risk of executing malicious code outside SQL Server 2005, xp_cmdshell is disabled by default, and the following...
Posted Tue, Oct 3 2006 by Martin Poon | 2 comment(s)
Filed under: , ,
SQL Server service pack installation may save the system administrator password in a file for SQL Server 7.0 and SQL Server 2000
During the installation of SQL Server products and service packs, the password(s) of system administrator (sa) and/or SQL Server Sevices domain account may be stored as clear text or weakly encrypted readable format in the SQL Server Setup files and/or...
Posted Mon, Sep 18 2006 by Martin Poon | 1 comment(s)
Filed under: ,