Sentrigo, a database security software company, has discovered a flaw in Microsoft SQL Server that allows any user with administrative privileges to read the unencrypted password of all other users.

Researchers at database security vendor Sentrigo say that in SQL Server 2000 or 2005, administrators can view all of the passwords used since the server went online by reviewing its process memory.

SQL Server - Can't connect to SQL Server after changing SA password ...

[!INCLUDESQL Server Azure SQL Database Synapse Analytics PDW ] Passwords can be the weakest link in a server security deployment. Take great care when you select a password. A strong password has the ...

To complete the process, the server sends back a list of leaked password hashes that start with those same five characters. 1Password then compares this list locally to see if it contains the full ...

LCPSoft has updated its database password recovery tool series, JRecoverer. The tools use dictionary attack, brute force attack, rainbow tables, or combined ways to quickly recover user account ...