Re: [LUG] SQL attacks

[Simon Waters <Simon@xxxxxxxxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Theo Zourzouvillys wrote:
> On Sunday 26 January 2003 1:04 pm, David Batho wrote:
>
> For once though, microsoft are not to blame for this.  just
for once ;)
>
> This just shows what happens when you let windows
administrators out into the
> wild.  It should be made illegal to run a windows server
unless you have a
> major clue!

Hmm one MS mail server product sneaks MS SQL in on the side (for
which no patch was available AFAIK*), yes the admins were
negligent not to check for open ports, but you might expect a
mail server product to be at least trivially "secured" out of
the box.

MySQL was not vulnerable - but why would you ask unless you had
failed to firewall your MySQL ports from the Internet ?! MySQL
will probably have other vulnerabilities.

 Simon

* Which isn't far, just reading the coverage.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+M+pLGFXfHI9FVgYRAuA+AJ4wrkaFecP4w09qjYw6ubT97imHTwCgz1rD
5zzYeRxBeH1YaCuUuZTTo/Y=
=1jCo
-----END PGP SIGNATURE-----

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.