SQLServer2000 Security Vulnerability repair

Source: Internet
Author: User
* ** Sqlserver2000 Security **-prohibit access to the registry to expand the stored procedure, and delete the corresponding xpstar. dll file (delete this file affects task scheduling) during the expansion process. Disable public to s.

/*** SQL server 2000 Security */-- disable access to the registry to expand the stored procedure, and delete the corresponding xpstar. dll file (delete this file affects task scheduling) use master revoke execute on xp_regread from dbo revoke execute on xp_regread from guest -- disable public to s

/**

* SQL server 2000Security

*/

--Access to the Registry extended stored procedure is prohibited, and the corresponding xpstar. dll file of the extended process is deleted at the same time (deleting this file affects task scheduling)

Usemaster

Revokeexecuteon xp_regread from dbo

Revokeexecuteon xp_regread from guest

--Prohibit public from executing sp_runwebtask

Usemaster

Revokeexecuteon master. dbo. sp_runwebtask frompublic

--Prohibit public from accessing stored procedures for creating SQL proxy tasks

Use msdb

Revokeexecuteon msdb. dbo. sp_add_job frompublic

Revokeexecuteon msdb. dbo. sp_add_jobstep frompublic

Revokeexecuteon msdb. dbo. sp_add_jobserver frompublic

Revokeexecuteon msdb. dbo. sp_start_job frompublic

--Enable Logon audit operation steps Enterprise Manager-right-click Server icon-properties-SecuritySex-review level select [all]-Restart

--Restart to enable C2 audit Mode

Usemaster

Exec sp_configure 'show advanced option', '1'

Reconfigure

Exec sp_configure 'c2 audit mode ', '1'

Reconfigure

--Delete A guest Account

Usemaster

Go

Sp_dropuser guest

Go

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.