WebApp Sec mailing list archives

RE: MS SQL Inter-database query question


From: "Harshul Nayak" <harshul.nayak () patni com>
Date: Mon, 15 Mar 2004 11:31:21 +0530

hi michael,
the data between two databases can be sniffed if these servers are on the
same network segment.
but usually all databases including Mysql supports SSL.
It would encrypt any communication to and fro from the server(s).

regs
Harshul nayak

-----Original Message-----
From: Michael Silk [mailto:silkm () hushmail com]
Sent: Monday, March 15, 2004 4:34 AM
To: webappsec () securityfocus com; secprog () securityfocus com
Subject: MS SQL Inter-database query question


Hello ...

  Just a quick question:

  When a query is performed from one database to another
  database on the same server, does the information pass
  over a socket ? or some other system ?

  If it is a socket, is it sent such that sniffing of the
  information is possible (i.e. sniffer on a computer in
  the same network can view data transfer) ?

  Thanks ...

-- Michael



Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program:
https://www.hushmail.com/about.php?subloc=affiliate&l=427


Current thread: