IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [sql-server]

SQL Server is Microsoft's relational database management system (RDBMS). It is a full-featured databse primarily designed to compete against competitors Oracle Database (DB) and MySQL.

SQL Server is Microsoft's relational database management system (RDBMS). It is a full-featured databse primarily designed to compete against competitors Oracle Database (DB) and MySQL. Like all major RBDMS, SQL Server supports ANSI SQL, the standard SQL language. However, SQL Server also contains T-SQL, its own SQL implemention. SQL Server Management Studio (SSMS) (previously known as Enterprise Manager) is SQL Server’s main interface tool, and it supports 32-bit and 64-bit environments. SQL Server is sometimes referred to as "MSSQL" and "Microsoft SQL Server".

160 questions
15
votes
3 answers

How secure is the traffic with Sql Server Management Studio?

I was just using Sql Server Management Studio on my WiFi, and I was actually wondering how secure the traffic/database communication is. Is traffic from querying secure, or is it easily sniffed for passwords and sensitive data?
KallDrexx
  • 253
  • 1
  • 2
  • 5
6
votes
4 answers

Security risks of using SQL Server without a firewall

My question is prompted by the fact that WinHost.com has some really cheap shared hosting for SQL Server where you don't need to manage your own Virtual Private Server. Unfortunately there is no firewall so you can access the server from anywhere on…
BVernon
  • 181
  • 1
  • 7
5
votes
1 answer

What can be used to keep xp_CmdShell in SQL Server disabled?

It's a well known fact that anyone with "SA" privs can turn on xp_CmdShell and use it and that includes any would-be attackers that can gain access to SQL Server as a login that has "SA" privs. There are some very good best practices to help…
Jeff Moden
  • 291
  • 3
  • 7
1
vote
1 answer

Can be SQL Queries sniffed through the client network adapter?

This may not be a fully Security Question but here's the thing: We have a really old software (released in 2000) that manages some data in the company. Right now we have to create a report from this software like how it manages the employees…
NathanWay
  • 559
  • 7
  • 14
1
vote
3 answers

Is opening an SQL server insecure?

I need to be able to remotely modify my SQL database. There are two ways: A PHPMyAdmin like interface (write scripts which will do it) Let the SQL Server through the firewall (so it listens on the Internet) Is hard as my (Windows) box doesn't…
user92829
  • 19
  • 1
0
votes
2 answers

Solution to site database

Our warehouse site desperately requires a database that runs efficiently, is secure and we can modify ourselves. Unfortunately the Company's policy does not allow any servers on site, only at headquarters. We are allowed to create MS Access…
Jon Muffn
  • 1
0
votes
1 answer

Block IP to SQL Server remote access

I find in my Windows Application logs many external IP addresses trying to connect to my SQL Server 2014. It keeps trying different usernames and passwords. SQL Server has remote access enabled as we require it. It's a Windows Server 2012 R2. Is…
Orion
  • 103
  • 1
  • 3