OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: MS-SQL 'sa' user exploit code
From: Domas Mituzas (midomSPACE.DAMMIT.LT)
Date: Wed Aug 23 2000 - 06:33:47 CDT


MS-SQL 'sa' was inherited from Sybase Adaptive Server Enterprise, that
has the same default login with NULL password. Moreover, other database
products have same problems. As Sybase Adaptive Server Anywhere is now
also reachable via TDS on IP, you may use the default DBA account with
password 'sql'. But every documentation shows how to change password after
the install.

With respect,
Domas Mituzas
Duomenu bazes ir technologijos