mailing list archives
Re: ms oledb data links
From: secure () MICROSOFT COM (Microsoft Product Security Response Team)
Date: Fri, 30 Jul 1999 10:35:12 -0700
Sounds like MDAC 2.1 is the solution for this problem. It provides the
ability to enable or disable saving of the password. If password saving is
enabled, a dialogue appears each time that the password is saved, reminding
the user that this is being done.
The registry key that governs this functionality is:
the value to a DWORD of 1 disables password saving.
Secure () microsoft com
From: veiled aspect [mailto:veiled_aspect () hotmail com]
Sent: Wednesday, July 14, 1999 7:33 PM
To: ntbugtraq () listserv ntbugtraq com; bugtraq () securityfocus com;
Security - Corporate Security Services
Subject: ms oledb data links
create a data link for OLE DB provider database connections & you'll see
that MS stores the password for your database acct. in clear text in the
.udl file. Double-clicking the file opens it with asterisks in the
field, but just open it in notepad for all the world to see.
it's fine if you use Windows NT integrated security.
data links have been around since ADO 2.0.
tripp () pccinc net
Get Free Email and Do More On The Web. Visit http://www.msn.com
- Re: ms oledb data links Microsoft Product Security Response Team (Jul 30)