DBA password brute-force support on PgSQL/MSSQL #31
Copy link
Copy link
Open
Description
bdamele
opened on Jun 26, 2012
Issue body actions
- MSSQL: OPENROWSET
- PgSQL: dblink()
Reactions are currently unavailable
Activity
Combine with CVE-2012-2122 (http://seclists.org/oss-sec/2012/q2/493) for MySQL
Example for MsSQL: http://labs.portcullis.co.uk/download/Revelli-OwaspDay2-Rome.pdf (slides 21 & 22)