Security Basics mailing list archives

Re: Checking DataBase being deployed on a Website


From: "Jepson" <jepson () hemsida net>
Date: Thu, 10 Nov 2005 22:48:46 +0100

a simple port scan will tell you about database
What if the database, is running on a seperate server not the same as the
web server ?

... or if the database is talking on a non-standard port, or if the router
doesn't accept traffic from outside the local net on port 3306/1433/whatever
the standard port may be for any other database solution?

An exceptionally useless solution, unless the site administrator is
completely incompetent. IMHO, of course.


Current thread: