Hello, 5 comments: 1/ In mssql_brute_force.nasl, you need to initialize 'report' at the beginning of the plugin. 2/ You could add the CVE-2000-0402 3/ In both, it could be good to change the report. The 'sa' account has a blank password. could be The 'sa' account has a blank password in SQL Server. 4/ In mssql_brute_force.nasl, the category could be change to ACT_ATTACK. (I'm not sure). 5/ Why did you change the description for mssql_blank_password.nasl. There is no 'Risk factor' anymore.
Regards, Georges Dagousset ----- Original Message ----- From: "H D Moore" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 04, 2002 7:37 AM Subject: Fwd: New Microsoft SQL Server Plugins! > I got responses back from the plugin-writers list, figured someone here might > want to test these new scripts out ;) > > ---------- Forwarded Message ---------- > > Subject: New Microsoft SQL Server Plugins! > Date: Thu, 3 Jan 2002 15:36:15 -0600 > From: H D Moore <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > > I rewrote my SQL Server blank "sa" account plugin and added another one to > brute force user accounts, comments are welcome! > > -HD >
