Sentrigo issued a free tool this week to erase stored passwords in SQL Server. Microsoft recommended end-users review its security guidance and guidelines literature.

If you are using mixed authentication mode (“SQL Server & Windows Authentication Mode”) you are vulnerable. SQL Server 2000, 2005, and 2008, running on all supported Windows platforms.