RE: MS SQL MDF FILE

["Sanders, Jonathan" <Jonathan.Sanders () healthsouth com>]

For things like this, I keep a copy of MSDE running on my laptop that I
can attach any MDF files to. You can get it here, it's free:

http://www.microsoft.com/sql/msde/default.asp

YMMV...

Jonathan


-----Original Message-----
From: Felikz [mailto:securityfocus () felikz net]
Sent: Monday, March 14, 2005 10:02 AM
To: Irvin Temp
Cc: pen-test () securityfocus com
Subject: Re: MS SQL MDF FILE

You should be able to "attach" it to any other SQL Server, one step of
this is to select the database owner thus giving you full access to it's

contents.

Irvin Temp wrote:

> Im currently doing a VA of our MS SQL Database
> servers.
> I was able to download a backup of our MDF file from
> one of the DB Server.
>
> When i open the MDF file using "vi" editor in UNIX,
> the
> file appears to be cryptic. Is there a way to decipher
>
> the contents of the file. I would like to show the to
> the
> full extent of the risks involved when an MDF file has
>
> been captured from a database server.
>
> Thanks!
>
> Regards,
>
> HY


Confidentiality Notice: This e-mail communication and any attachments may contain
confidential and privileged information for the use of the designated recipients named above. If
you are not the intended recipient, you are hereby notified that you have received this
communication in error and that any review, disclosure, dissemination, distribution or
copying of it or its contents is prohibited. If you have received this communication in
error, please notify me immediately by replying to this message and deleting it from your
computer. Thank you.