Opty-Way Enterprise includes MSDE with sa <blank>

[Philippe de Brito <le_mamousse () yahoo fr>]

Opty-Way Enterprise is an industrial soft for cutting
management.

The package installs MSDE on server side, leaving sa
account with blank password, thus allowing remote
launch of xp_cmdshell.

Vendor status: informed March 15, 2002.
Action taken: none before outbreak of SQLSpida.
(sigh)

-- 
le mamousse
~Nous sommes venus en paix~

___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com