Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 Import/Export (DTS) and Replication (2000)
 ' sa ' password .

Author  Topic 

admin001
Posting Yak Master

166 Posts

Posted - 2002-07-22 : 04:31:39
Hello ,

Is is correct that the 'sa ' passoword is stored in one of the files of the SQL Server and is easily readable if the location of the file is known ?

If not , then is the password encrypted when i try to connect to the SQL server on the Internet ?

Thanks.


drumm
Starting Member

14 Posts

Posted - 2002-07-22 : 05:32:46
Hi,

there's a great article on how SQL Server stores the passwords. You can read it by following this link:

http://www.sqlteam.com/redir.asp?ItemID=10075

Go to Top of Page

Wanderer
Master Smack Fu Yak Hacker

1168 Posts

Posted - 2002-07-22 : 08:56:40
I believe the specific concern you need to address has to do with the use of automated installs of SQL - where the ISS files can be a potential vulnerability. See:

http://ciac.llnl.gov/ciac/bulletins/k-026.shtml

HTH

Go to Top of Page
   

- Advertisement -