Security Basics mailing list archives

MSsql SA user with blank password verification


From: juan babi <juan_babi () hotmail com>
Date: Thu, 7 May 2009 03:27:56 +0000


Hi All,
for a client of mine im doing a security auditing. I
ran Sql recon in his lan. the tool reported that many
servers has Blank Sa password version of sql 8.00.194 so I
fired up tsql from linux and issued the command:
tsql -S 10.100.1.84 -p 1433 -U SA 
Local carser is Ansi_x3.4.-1968
Password: ( I just pressed enter here)
so I get in return:
server is unavailabe or does not exist.
There was a problem connecting to the server
.
whats the problem? shouldnt I be able to login without
a password?
thanks 
Juan
_________________________________________________________________
Windows Liveā„¢: Keep your life in sync. Check it out!
http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t1_allup_explore_012009

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most 
concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain 
a laser like insight into what is covered on the exam, with zero fluff! 

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------


Current thread: