Questions tagged [sql-server]

SQL Server is Microsoft's relational database management system (RDBMS). It is a full-featured databse primarily designed to compete against competitors Oracle Database (DB) and MySQL.

Filter by
Sorted by
Tagged with
0
votes
0answers
35 views

Is whitelisting Google Apps Scripts Actually safe?

Google offers a way to connect it's apps (like google sheets) to a sql server. In order to do this, you need to whitelist their google apps scripts IPv4 subnets. I don't see how this could be secure ...
0
votes
0answers
29 views

Secure access to MS SQL from web applications

MS SQL provides two primary authentication methods, Windows Authentication or SQL Server Authentication. Since local MS SQL accounts are problematic to maintain and monitor this option is not ...
1
vote
0answers
36 views

Does TDE not protect against disk theft?

I read the following on Microsoft's site. Can someone please clarify - "With TDE, is the data stored in my data, log, and backup files protected from a disk theft?" Yes, but only if the files ...
1
vote
2answers
80 views

Insider threat mitigation sql databases

I support a number of applications some of which have sql databases. There's a number of scripts (mostly powershell/bash) to check the state of an application to see if it's considered healthy. Some ...
2
votes
1answer
122 views

What security implications are involved when using a CSV file to fill a SQL table?

I have some data on CSV files and I want automate the input of this data into an SQL database using Powershell. The data is mostly, if not completely, numbers. I am using a script based on the one ...
3
votes
2answers
87 views

Is SQL auth over windows auth a red flag?

I'm working on something where using windows authentication to SQL server is difficult if not impossible. My team member is adamant that using SQL auth is much more difficult to manage and is a major ...
13
votes
2answers
2k views

Generating a PIN from cryptographic bytes

One of our applications uses SQL Server for the back end, and that application requires a 4 digit numerical PIN for employees to be created that works with a key (more or less). The system itself ...
0
votes
0answers
110 views

Disk Encryption VS SQL TDE Encryption

I am trying to understand what would be the benefit of using SQL TDE on top of underlying disk encryption. My understanding is that disk encryption will prevent malicious users pulling out the disk ...
0
votes
2answers
76 views

Does choice of DBMS matter for protection against XSS and other injection attacks?

I am choosing between the three most used databases, MySQL, Microsoft SQL Server and MongoDB. I have to choose the most secure database from these three. Does my choice of DBMS has a role in ...
0
votes
0answers
160 views

Windows Firewall blocking local access to SQL Server?

I have an AWS virtual machine running a web application on IIS that connects to a SQL Server database (on the same machine). Recently, I have noticed that there are a plethora of failed login attempts ...
1
vote
2answers
60 views

Transactional replication through VPN, do I need to encrypt connection?

New to security. We are planning to setup SQL Server transaction replication over a VPN to Azure over the internet. The source server is inside our data center and the target will be a managed ...
0
votes
0answers
129 views

How to store SSN in asp.net web-based application on a short-term basis?

After scouring the web to find countless similar questions, I still find it important enough to ask based on my client's specific requirements. Now I know most if not all are not a lawyer, but if you'...
1
vote
0answers
75 views

OWASP scan on SQL Server Compact Edition

On running a dependency check on my projects library, the tool reported multiple vulnerabilities in System.Data.SqlServerCe.dll, and CVE-2012-1856 with the highest score of 9.3 The version of the ...
0
votes
2answers
556 views

Can an ampersand (&) be used in SQL injection?

With SQL Server, does the ampersand pose as a threat related to SQL injection? I'm working on a project that includes this as a blacklisted character. I'm aware that there's a threat related to Oracle ...
0
votes
4answers
176 views

Is it possible to verify if a website is vulnerable to SQLi by viewing its source code?

I've heard the eval() function is vulnerable to SQLi. Can I check for vulnerabilities by simply viewing the website source code?
-1
votes
1answer
222 views

Attempting SQLi against website with WAF filter [closed]

I was pentesting a website when I discovered that the URL included the id parameter. Because of this, I knew that the id parameter might be vulnerable to SQLi. I received a 200 response and found no ...
2
votes
1answer
372 views

Impact of SQL injection on SELECT statement

During a routine penetration test I encountered a possibility for SQL injection. The following criteria apply: Microsoft SQL Server (2016); Query has to start with SELECT; The semicolon ; is not ...
1
vote
0answers
215 views

Nessus ADV180002: Microsoft SQL Server January 2018 Security Update (Meltdown) (Spectre)

I have a MS Server 2012 r2 running ArcServe 17.5, which uses MSSQL Server Express 2014. When Nessus runs a scan of this system, I am getting the plugin 105613 - ADV180002: Microsoft SQL Server January ...
0
votes
0answers
49 views

SQL RLS for NIST compliance

Is there specific NIST documentation advising about implementing MS SQL Row-Level security for 800-53 compliance?
0
votes
1answer
165 views

Database logs have multiple “Logon Login failed for user” from different IPs

Background: I have an SQL Server database running on Amazon RDS The AWS dashboard has a section for logs and whenever I check the logs I see the following: 2018-04-27 06:10:26.00 Logon Error: 18456,...
4
votes
1answer
158 views

What can I do with blind SQLi if the database is encrypted?

During a pentest engagement, I found a blind SQLi and I can read all tables and data in them. There is just one problem. They are using a static AES key (defined in web.config and I don't have access ...
0
votes
1answer
504 views

Is it safe to use an AD account to run an App Pool in IIS in order to provide SQL read/write permissions to a web app?

I've been working on an intranet web application that provides read/write, role-based access to a database. I have been asked to configure the IIS application to use an AD account for the Application ...
-1
votes
2answers
93 views

Secure access to an aplication from internet [closed]

I have an application wich needs to connect to the main database. I want this application to be accessible from outside the enterprise network. I think that the best way is to install the app in a SQL ...
2
votes
1answer
118 views

Can native SQL code be vulnerable? To what?

I was able to find an article that mentions that SQL injection can be done to SQL code in the following scenarios where stored procedures are involved: EXEC statements Dynamic Cursors Assuming SQLi ...
4
votes
2answers
858 views

Can 4 single quotes still be escaped producing a sql injection on sql server? [duplicate]

I found a simple breakout in a where clause in one of our projects where the code is so old that they claim they can't use parameters to communicate with ms SQL server. It's written in C++, I can't ...
2
votes
1answer
116 views

SQL Security Questions

The CISO of my company is currently away and as IT manager I have been asked to send some security questions to a company hoping to implement an SQL database to manage salaries, orders etc. I have ...
13
votes
3answers
16k views

Sanitizing input for parameterized queries

If I use fully parameterized queries everywhere, is it still necessary and/or security-relevant to somehow sanitize input? E.g. check that mail addresses are valid before sending a parameterized query ...
1
vote
0answers
190 views

Sql Server access from DMZ

I'm developing a B2B website open to the internet. I've deployed the website on an application server that is in its own network and is only allowed to communicate to the intranet on two ports: To ...
1
vote
0answers
182 views

Security risks introduced when moving from a three tier to a two tier architecture

I host several .net web applications using a standard three tier architecture with web servers located in a demilitarised zone. I have been asked to host a two tier .net web application where the web ...
1
vote
0answers
159 views

I want to know if exist a vulnerability in using sp_send_dbmail of SQL Server?

I'm using the next stored procedure sp_send_dbmail in SQL Server 2012, the DBA ask me if it possible make SQL Injection using this SP, or SMTP Injection? In the configuration of the Database ...
0
votes
2answers
767 views

What possible attacks might occur on a SQL Server TCP/IP port?

We have a VPS that contains a SQL Server Express instance. Using SQL Server Configuration we have enabled TCP/IP to listen on a random port, say 5741. We have disabled sa and created another user with ...
0
votes
1answer
87 views

Is a compromised SQL Server sa account without a domain login enough to access database?

If a SQL Server account with system administrator rights is compromised but there is no access to a domain account, port 1433 is not exposed outside of the corporate firewall and SQL injection is not ...
-1
votes
2answers
598 views

SQL injection - NEw attacks discovered on my site. Please advise

Recently discover someone doing the following seacrch queries on my website! 1 AND 1=2 UNION SELECT 0x6461726b31636f6465,0x6461726b32636f6465,0x6461726b33636f6465,0x6461726b34636f6465-- 2620 3 ...
1
vote
2answers
296 views

Creat IIS USER in SQL from different machine [closed]

I am trying to create a IIS APPPOOL\poolName security login in SQL but getting this error "Windows NT user or group 'IIS APPPOOL\poolName' not found." I am doing this to run elmah. doing this from ...
0
votes
1answer
1k views

Block IP to SQL Server remote access

I find in my Windows Application logs many external IP addresses trying to connect to my SQL Server 2014. It keeps trying different usernames and passwords. SQL Server has remote access enabled as ...
2
votes
1answer
403 views

Why Microsoft claims that SQL Server is the least vulnerable database? [closed]

Microsoft claims in their official site that “SQL Server is the least vulnerable database for six years running in the NIST vulnerabilities database”, I reviewed the NIST web site, but I can’t find a ...
2
votes
1answer
294 views

First time penetration testing code check

In the following scenario the website allows users to upload an excel document that contains information that will be loaded to the database, and stored as values that can later be accessed by the ...
3
votes
2answers
92 views

Security concerns with external MySQL access using tunnelling

I have gotten my personal vServer with a standard installation of Ubuntu Server 16.04 and I wanted to install and configure a MySQL server on it. I was considering to disable direct external access, ...
1
vote
1answer
1k views

Can be SQL Queries sniffed through the client network adapter?

This may not be a fully Security Question but here's the thing: We have a really old software (released in 2000) that manages some data in the company. Right now we have to create a report from this ...
1
vote
2answers
107 views

Is there any way of making an SQL server think I'm accessing from localhost?

The title is pretty much self explanatory If a SQL server only allows connections from localhost, is there any way I can access from the outside by making it think I'm actually accessing from ...
11
votes
3answers
35k views

Determine SSL/TLS version using Wireshark

Using Wireshark, I am trying to determine the version of SSL/TLS that is being used with the encryption of data between a client workstation and another workstation on the same LAN running SQL Server. ...
1
vote
0answers
87 views

Encrypt SQL Server traffic on a LAN

I have a .NET client application that runs on several machines on a local area network. All machines (including the server which is running MSSQL Server 2016) are running either Windows 7, 8 or 10. ...
4
votes
2answers
299 views

This is a working SQL-injection. What could the server side query string look like?

This question is about a small detail in a larger school assignment. I have been struggling with this little problem for too long. ABCTF arranged a Capture-the-Flag competition which was held earlier ...
2
votes
1answer
751 views

How can MS Access work with an encrypted field in a Linked SQL Server table?

I have an MS Access .accdb file that acts as a front-end to a SQL Server database. There is a table that holds SSNs in plain text. We want to encrypt those SSNs in the table so that, the user can ...
3
votes
1answer
92 views

Is it a security hole to have a stored procedure output the key and certificate names?

My scenario is this: (Following the method of opening keys, encrypting, and closing keys, found in Ben Cull's Blog.) Imagine you have a MS SQL sever with tons of keys for encrypting different ...
-3
votes
1answer
259 views

How can I exploit a SQL Injection based on time without using single-quotes?

I'm doing some test on a web application and I found a SQL Injection in a stored procedure. It's something like this: Stored_procedure [input] The stored procedure validates the input, it must be an ...
0
votes
2answers
94 views

Compromised server name and port number of a SQL Server DB Server

I would like to get an expert opinion on how dangerous is it to have the database server name and SQL server instance and port number compromised by accidentally exposing it in source code snippet ...
2
votes
1answer
104 views

Is internal or external hosting more secure? [closed]

I have been looking for a while to find out the number of malicious attacks that have been successful against internal vs externally hosted web and SQL solutions. When I say internal, I mean the ...
-3
votes
1answer
2k views

SQL Server infected with Troldesh ransomware with DB backup files [closed]

The SQL server was infected by a ransomware virus. Files has been modified as FileName.7z.id-38199C3A.diablo_diablo2@aol.com. Unfortunately all the DB backup files were also stored on the C: drive. I ...
5
votes
1answer
810 views

How does the client pick the correct certificate from its certificate store?

As I am able to configure my SQL Server and client to establish SSL connection, I have installed the certificate on the server as well as on the client machine (Trusted Root Certification Authorities ...