Re: pen-test on a windows 2003 server box whit MS-SQL and Terminal Services

[Kevin Reiter <tux () penguinnetwerx net>]

Hugo Vinicius Garcia Razera wrote:
> Hi every one, I'm doing a pen test on a client, and have found that he
> have a windows 2003 server box on one segment of his public addresses
> this is his dns/web/mail server:
>
> - mssql :1433
> - terminal services :3389
> - iis 6 :80
> - smtp :25
> - pop3 :110
> - dns : 53
> - ftp : filtered

<snip>

Why is MSSQL even open to the outside?  Are they (your client) aware of 
this?

Just curious...