Browse by Tags

SQL Server TSQL security concerns - highlights for a newbie reference

Published 5 January 9 1:1 AM | SqlServer-QA.net

Here it is first post in the year 2009, still I would like to visit the good old advice of securing your SQL Server environment. For any user in IT, Security must be a top priority in order to ensure their PC or environment is secured. You might have...

Filed under: sql server, security, edition, development, stored procedure, tsql, production, select

SQL Server stored procedure vulnerability heap buffer overrun in SQL Server, MSDE, and SQL Express

Published 23 December 8 3:46 AM | SqlServer-QA.net

You may have seen the sp_replwriterovarbin - New SQL Server Injection-Based Attack Found vulerability about the new public reports of a vulnerability that could allow remote code execution on systems with supported editions of SQL Server 2000, 2005, 2005...

Filed under: sql server, security, best practices, stored procedure, verison, msde, vulnerability, advisory, sqlexpress, automatic update

SQL Server undocumented stored procedure to get information on login mapping name

Published 24 December 7 6:55 AM | SSQA.net

They say better not to use UNDOCUMENTED stored procedures, which is true in the aspect when any Service Pack or version is released that may not be included and your task might have issues in working out. Similar to this I was going through various methods...

Filed under: sql server, security, stored procedure, best practice, server state, undocumented

Database Mirroring sys.sp_dbmmonitorupdate stored procedure fails with error "Incorrect syntax near '-'"

Published 12 November 7 3:23 AM | SSQA.net

Recently got stuck with the stored procedure sys.sp_dbmmonitorupdate which is used to monitor the database mirroring session. As usual you could do using the GUI tool, but sometimes using TSQL methods is good enough to see what is happening on your system...

Filed under: sql server, security, bug, database mirroring, error log, 2005, stored procedure, monitoring, hyphen, connect site

Need to grant permission to view stored procedure text

Published 10 September 7 3:24 AM | SSQA.net

If you need to grant permissions to a login that only needs to view stored procedures (contents not just names of SP's). Further you may not want to grant that login with DB_OWNER or DB_DDLADMIN roles within that database, so how to achieve this task...

Filed under: sql server, security, update, permissions, stored procedure, schema, execute, view definition