469,110 Members | 1,927 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 469,110 developers. It's quick & easy.

Is it MS SQLServer or something else?

I am using a tool called AppDetective to identify database servers and
then to scan them for vulnerabilities.

I've just been handed a list of machines and have been asked to
determine which ones are actually MS SQLServer. (AppDetective says
that all of the systems on the list have MS SQLServer).

Does MS SQLServer make use of the same engine/port arrangements for
its other applications such as MS Access?

I've also heard that the engine (Jett?) is also used in some other
Windows components, which is why the AV systems had such problems with
Slammer last year. Is this true?

Thanks in advance
Jul 23 '05 #1
1 1153

"Byrocat" <bd******@sympatico.ca> wrote in message
news:b4**************************@posting.google.c om...
I am using a tool called AppDetective to identify database servers and
then to scan them for vulnerabilities.

I've just been handed a list of machines and have been asked to
determine which ones are actually MS SQLServer. (AppDetective says
that all of the systems on the list have MS SQLServer).

Does MS SQLServer make use of the same engine/port arrangements for
its other applications such as MS Access?

I've also heard that the engine (Jett?) is also used in some other
Windows components, which is why the AV systems had such problems with
Slammer last year. Is this true?

Thanks in advance


I don't know how AppDetective identifies an MSSQL installation, but if it's
reporting machines which you don't believe have MSSQL, it may be that they
have MSDE instead - it's a throttled version of MSSQL for small
applications. If any of the apps listed here are installed, that may be why
they appear in AppDetective:

http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=31

Some people installed these apps without realising that they included MSDE,
so they did get hit by Slammer, despite believing that they had no MSSQL
installations. As of SP3a, network access to MSDE is disabled by default, to
prevent attacks on MSDE installations which are only used locally.

The Jet engine is used by Access, which doesn't listen on any ports since it
isn't a server.

Simon
Jul 23 '05 #2

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

reply views Thread by Stormblade | last post: by
7 posts views Thread by Bart Torbert | last post: by
11 posts views Thread by kirpi | last post: by
6 posts views Thread by ad | last post: by
reply views Thread by zhoujie | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.