Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.misc -> Microsoft's New ODBC Admin

Microsoft's New ODBC Admin

From: Daniel A. Morgan <dmorgan_at_exesolutions.com>
Date: 1997/04/05
Message-ID: <3346EE15.532D@exesolutions.com>#1/1

We have downloaded from Microsoft their version 3 ODBC admin tool and determined that it completely compromises security for any and all connected applications.

If you would like to test this yourself perform the following on a test machine. Do NOT compromise your corporate security.

  1. Download the version 3 ODBC Admin from www.microsoft.com
  2. Install and configure
  3. Run trace
  4. Log into any "secure" instance
  5. Take a good look at the trace
  6. Observe that Microsoft has compromised your security

Once again Microsoft has demonstrated an amateurish level of testing and understanding of the needs of the corporate development environment.

Needless to say this has been reported to the appropriate publications.

Daniel A. Morgan Received on Sat Apr 05 1997 - 00:00:00 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US