<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Musings on Database Security &#187; MS SQL Server</title>
	<atom:link href="http://www.slaviks-blog.com/category/ms-sql-server/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.slaviks-blog.com</link>
	<description>Slavik&#039;s Blog</description>
	<lastBuildDate>Wed, 07 Dec 2011 17:07:31 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Changing MS SQL Server system stored procedures</title>
		<link>http://www.slaviks-blog.com/2010/08/19/changing-ms-sql-server-system-stored-procedures/</link>
		<comments>http://www.slaviks-blog.com/2010/08/19/changing-ms-sql-server-system-stored-procedures/#comments</comments>
		<pubDate>Fri, 20 Aug 2010 03:30:43 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[MS SQL Server]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=269</guid>
		<description><![CDATA[Sometimes, you want to enhance or change system stored procedures to add functionality like security related code. This is not supported and might blow up in your face so all the standard caveats apply. If it blows in your face, tough luck! SQL2000 is pretty straight forward and you can find plenty of places on [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/08/19/changing-ms-sql-server-system-stored-procedures/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>David Lichtfield in the Oracle cross-hairs (again…)</title>
		<link>http://www.slaviks-blog.com/2010/02/03/david-lichtfield-in-the-oracle-cross-hairs-again%e2%80%a6/</link>
		<comments>http://www.slaviks-blog.com/2010/02/03/david-lichtfield-in-the-oracle-cross-hairs-again%e2%80%a6/#comments</comments>
		<pubDate>Thu, 04 Feb 2010 02:18:23 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[MS SQL Server]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=221</guid>
		<description><![CDATA[Yesterday at Black Hat, David released information on his latest find, a pretty serious batch of vulnerabilities in Oracle 11g which allows any user to escalate privileges to gain complete access &#38; control of the database. What’s interesting here is not so much that there is yet another vulnerability  (for those of you who are [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/02/03/david-lichtfield-in-the-oracle-cross-hairs-again%e2%80%a6/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Passwords leakage from MS SQL Server</title>
		<link>http://www.slaviks-blog.com/2009/09/02/passwords-leakage-from-ms-sql-server/</link>
		<comments>http://www.slaviks-blog.com/2009/09/02/passwords-leakage-from-ms-sql-server/#comments</comments>
		<pubDate>Wed, 02 Sep 2009 17:55:33 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[MS SQL Server]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[sentrigo]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=160</guid>
		<description><![CDATA[A member of Sentrigos&#8217; security and research team, Assaf Nativ, found an interesting security issue in all versions of MS SQL Server. Turns out that SQL Server saves in memory in clear text user credentials (passwords) of users logging in using SQL Server native authentication. Users using Windows authentication are not affected. Although Microsoft recommends [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2009/09/02/passwords-leakage-from-ms-sql-server/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>SQL Server 2008 &#8211; DBCC BYTES</title>
		<link>http://www.slaviks-blog.com/2008/09/19/sql-server-2008-dbcc-bytes/</link>
		<comments>http://www.slaviks-blog.com/2008/09/19/sql-server-2008-dbcc-bytes/#comments</comments>
		<pubDate>Fri, 19 Sep 2008 16:24:22 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[DBA]]></category>
		<category><![CDATA[MS SQL Server]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=67</guid>
		<description><![CDATA[I&#8217;ve just noticed that Microsoft had removed the DBCC BYTES command from DBCC. On 2005: DBCC TRACEON(2588) DBCC HELP (&#8216;?&#8217;) GO activecursors addextendedproc addinstance auditevent autopilot buffer bytes cacheprofile cachestats callfulltext checkalloc checkcatalog checkconstraints checkdb checkfilegroup checkident checkprimaryfile checktable cleantable clearspacecaches collectstats concurrencyviolation cursorstats dbrecover dbreindex dbreindexall dbrepair debugbreak deleteinstance detachdb dropcleanbuffers dropextendedproc config dbinfo [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2008/09/19/sql-server-2008-dbcc-bytes/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Database statements that can make you tear out your hair</title>
		<link>http://www.slaviks-blog.com/2008/08/28/database-statements-that-can-make-you-tear-out-your-hair/</link>
		<comments>http://www.slaviks-blog.com/2008/08/28/database-statements-that-can-make-you-tear-out-your-hair/#comments</comments>
		<pubDate>Thu, 28 Aug 2008 23:52:11 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[DBA]]></category>
		<category><![CDATA[MS SQL Server]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[SQL injection]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=66</guid>
		<description><![CDATA[Its been a long time since I&#8217;ve written anything here. I&#8217;ve been extremely busy with my family move to the bay area. I still can&#8217;t believe the amount of paperwork required. I&#8217;ve filled virtually hundreds of forms and it&#8217;s not over yet. But, after a month here, I can say that we&#8217;ve finally settled down. [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2008/08/28/database-statements-that-can-make-you-tear-out-your-hair/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Mass SQL Injection attack is still out there</title>
		<link>http://www.slaviks-blog.com/2008/06/20/mass-sql-injection-attack-is-still-out-there/</link>
		<comments>http://www.slaviks-blog.com/2008/06/20/mass-sql-injection-attack-is-still-out-there/#comments</comments>
		<pubDate>Fri, 20 Jun 2008 13:22:34 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[MS SQL Server]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[SQL injection]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=57</guid>
		<description><![CDATA[Well, it was an interesting day today for us in Sentrigo. One of our customers was being attacked by this mass SQL injection and since our software identified the attack he came to us to help him cope with the situation. As explained in other places, the attack takes advantage of vulnerable web sites and [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2008/06/20/mass-sql-injection-attack-is-still-out-there/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.239 seconds -->

