----- Original Message ----- From: "H D Moore" <[EMAIL PROTECTED]> To: "Georges Dagousset" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, January 04, 2002 8:31 AM Subject: Re: New Microsoft SQL Server Plugins!
> Cool, a response ;) [...] > Did you get a chance to try them against a SQL Server? I tested on 7.0 only > (english) and would like people with accessible 6.5 and 2000 servers to give > it a shot and make sure it works. When writing the plugin, I found numerous > ways to take down SQL Server 7.0 with bad packets, so be careful when trying > it on any system other than 7.0 (where it was tested thoroughly and should > not crash). I have tested those plugins against 4 SQL Severs (I don't know the version! probably 7.0). All are vulnerable with mssql_blank_password.nasl. But none are vulnerable with the brute force. Georges Dagousset
