Signature Detail

DB: MS-SQL Server Null Password

This signature detects attempts to login using a zero-length (null) password to a Microsoft SQL Database Server. Null passwords are insecure and can indicate that attackers are probing your network.

Extended Description

This vulnerability makes the server subject to attacks by worms such as Voyager Alpha Force, Spida, and Cblade, and enables attackers to gain administrative privileges.

References

• URL: http://www.microsoft.com/sql/techinfo/administration/2000/security/default.asp
• URL: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/modadmin/html/deconchangingsqlserveradministratorlogin.asp
• URL: http://support.microsoft.com/default.aspx?scid=kb;EN-US;313418