Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: ms oledb data links
From: secure () MICROSOFT COM (Microsoft Product Security Response Team)
Date: Fri, 30 Jul 1999 10:35:12 -0700


Sounds like MDAC 2.1 is the solution for this problem.  It provides the
ability to enable or disable saving of the password.  If password saving is
enabled, a dialogue appears each time that the password is saved, reminding
the user that this is being done.

The registry key that governs this functionality is:
HKEY_CLASSES_ROOT\CLSID\{2206CDB2-19C1-11D1-89E0-00C04FD7A829}\fDPS. Setting
the value to a DWORD of 1 disables password saving.

Regards,

Secure () microsoft com


-----Original Message-----
From: veiled aspect   [mailto:veiled_aspect () hotmail com]
Sent: Wednesday, July 14, 1999 7:33 PM
To: ntbugtraq () listserv ntbugtraq com; bugtraq () securityfocus com;
Security - Corporate Security Services
Subject: ms oledb data links


create a data link for OLE DB provider database connections & you'll see
that MS stores the password for your database acct. in clear text in the
.udl file.  Double-clicking the file opens it with asterisks in the
password

field, but just open it in notepad for all the world to see.

it's fine if you use Windows NT integrated security.

data links have been around since ADO 2.0.

-tripp
tripp () pccinc net


_______________________________________________________________
Get Free Email and Do More On The Web. Visit http://www.msn.com


  By Date           By Thread  

Current thread:
  • Re: ms oledb data links Microsoft Product Security Response Team (Jul 30)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault