Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Missing admin sql password in Okena StormWatch Dec 18 2002 07:06AM
Marc Ruef (marc ruef computec ch)
Hi!

I was working with Okena StormWatch[1] - a really interesting commercial
intrusion prevention product - and saw that there is the SQL password
for the admin account (sa) missing.

With a SQL client and a blank password it's possible for everyone who
can connect to the manager to compromise the ...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus