Last week Sentrigo brought a security hole in SQL Server to my attention. The issue is simply that SQL Server stores passwords in clear text in memory, so it’s quite possible to sniff the memory ...

If you are using mixed authentication mode (“SQL Server & Windows Authentication Mode”) you are vulnerable. SQL Server 2000, 2005, and 2008, running on all supported Windows platforms.

Researchers at database security vendor Sentrigo say that in SQL Server 2000 or 2005, administrators can view all of the passwords used since the server went online by reviewing its process memory ...

Reason: login failed for user 'sa'. Please verify SQL Server is running and check your SQL Server Registration properties (by right-clicking on the SERVER1 node) and try again.</pre> ...

The resulting SQL query would look something like: SELECT id FROM users WHERE username=’username’ AND password=’password’ OR 0=0 The statement “0=0” that was added is always true.

[!INCLUDESQL Server Azure SQL Database Synapse Analytics PDW ] Passwords can be the weakest link in a server security deployment. Take great care when you select a password. A strong password has the ...