Re: SQL Attack?

By default, the xp_cmdshell system stored procedure in SQL Server 2005(I am
assumming it is since you've mentioned SBS 2003 R2) is disabled. I'd check
your Event Logs - application and security - and match the account that
tries to access the MSSQL$something or the SQLAgent$something



"Leythos" <void@xxxxxxxxxxx> wrote in message
news:MPG.211612326c92d5f998986f@xxxxxxxxxxxxxxxxxxxx
In article <#qYceMb0HHA.600@xxxxxxxxxxxxxxxxxxxx>, sbradcpa@xxxxxxxxxxx
says...
Right but he was saying he's seeing those "inside" his sql logs. Which
begs the question on what he does have open.

Sorry, thought you meant me.

My reading of his message is that someone outside has access to his SQL.

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@xxxxxxxxxx (remove 999 for proper email address)


.

Relevant Pages

  • Re: SQL Attack?
    ... assumming it is since you've mentioned SBS 2003 R2) is disabled. ... your Event Logs - application and security - and match the account that ... Calling an illegal alien an "undocumented worker" is like calling a ...
    (microsoft.public.windows.server.sbs)
  • Re: slowing/halting stored procedure from ado.net
    ... but at the time when calling from the application ... Studio goes without any slowdown, ... There was/is no big job running on the sql server, ... execution the cached plan does not match the ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Checking for return codes
    ... The last generated key in a SQL Server can be found by calling "Select ... In the stored procedure I would like to run a select to ... select in the SQL Server stored procedure to my VB .Net procedure? ...
    (microsoft.public.dotnet.framework.adonet)
  • ISA server 2004 logging to SQL 2005 EXpress
    ... Since I upgraded the MSDE 2000 tot SQL Server 2005 Express, my event logs fill up with event 17137 "Starting up database". ... but ISA creates a new table each day which has again Autoclose=true. ... I don't want the SQL server to close/reopen the logging table thousands of times a day! ...
    (microsoft.public.isa)
  • Re: R2 SQL 2000 or 2005
    ... We are installing new hardware for our SBS 2003 so are considering upgrading ... We have 25 users constantly using SQL Server, ... Many vendors support their DB on 2005, but not as many support the ... Calling an illegal alien an "undocumented worker" is like calling a ...
    (microsoft.public.windows.server.sbs)