Re: usefulness of this tool

[neil-on-metasploit at restricted.dyndns.org (Neil)]

H D Moore writes:
> Both of the MSSQL exploits apply to SQL Server 2000 or MSDE prior to SP3. 
> The resolution overflow uses the UDP protocol, whereas the "hello" bug 
> uses TCP. I prefer to use the resolution bug, because of the broadcast 
> and spoofability features of UDP. 

Ok, I was reading the archive about exploit sql2000 specifically using the 
win32 adduser payload. So if my exploit was successful, will it add a user 
on the target sql2000 server? If I am correct, what database will it have 
access to(master, ...etc)? 

Thanks. 

Neil