Sentrigo, a database security software company, has discovered a flaw in Microsoft SQL Server that allows any user with administrative privileges to read the unencrypted password of all other users.

Despite the plentiful information in Books Online and on the official “SQL Server 2000 Security” document Microsoft offers online, setting up a truly secure SQL Server remains a difficult task. In ...

LCPSoft has updated its database password recovery tool series, JRecoverer. The tools use dictionary attack, brute force attack, rainbow tables, or combined ways to quickly recover user account ...

Native SQL Server authentication lacks strong controls such as password complexity, expiration, lockout, or history when using SQL Server logins. It’s provided for backward compatibility and for use ...