I'm getting this finding:
|ms-sql-s (1433/tcp)|10862|Security Hole|The following accounts were
found on the SQL Server:\nAccount 'sa' has password 'sa'\n\n\nAn
attacker can use these accounts to read and/or modify\ndata on your SQL
server. In addition, the attacker may be\nable to launch programs on
the target Operating system\n\n
It has no rating, how come, as this particular finding allows me to take
full control of everything on the SQL server with osql.exe.
Oskar
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
