Re: MS-SQL 'sa' user exploit code

[Neil Pike <NeilPike () COMPUSERVE COM>]

 This is "fixed" in SQL 2000, where the default is NT integrated security
and you have to manually override this and confirm you want a "standard"
login, and confirm again if you want it to have a blank password...
 
 But anyone who leaves the default in SQL 7 or below deserves all they get!
 
> It has come to light that it is now common knowledge that MS-SQL has a
blank
> 'sa' password by default. This seems to affect a _lot_ of servers on the
> internet.

 Neil Pike MVP/MCSE
 Protech Computing Ltd