Korean
<< Back
VID 27111
Severity 10
Port 135
Protocol TCP
Class DB
Detailed Description MS SQL Server must manage life cycle of account.
The target of account management is all accounts other than accounts provided by default in the database. (Including service, monitoring, I / F, etc.)
For the accounts created before the start of account management, the usage, the user, the scope of authority, and the expiration date are collectively collected and approved.

* Note: It shows the list of accounts of the MS SQL server, and it is necessary to confirm whether it is actually unnecessary.

* Platforms Affected:
Microsoft SQL Server
Recommendation * MSSQL account list Check
MSSQL: [SQL Server Management Studio/ Connect to Diagnostic Server/ Security/ Login] Account verification
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)