hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Sql Secure
EXPLOiTED
Hmm....The unsecuring worked great. Then i secured it and tried again later that nght and it didnit work...gave me this error...

C:\>osql.exe -S 192.168.2.100 -U sa -P "" -i restore.txt
1> 2> 3> Msg 2714, Level 16, State 7, Server HEBS, Procedure sp_addextendedproc,
Line 26
[Microsoft][ODBC SQL Server Driver][SQL Server]There is already an object named
'xp_cmdshell' in the database.
1>


Now whats the error?...Also...anyway i can erenable this on the box Locally? i dont wanan reionstall SQL ;(
coder
you're getting the error because it's trying to create something that is already there... ie. the object named "xp_cmdshell" i imagine that this was created the first time you ran it... then the 2nd time, since the object was already created you get this error.

you can modify the code if possible or delete the xp_cmdshell object before running it again!

EXPLOiTED
you can modify the code if possible or delete the xp_cmdshell object before running it again


ok how can i delete the code, or whatever...i just wanna gain teh cmd shell again.
sylver
u can try to create an other procedure like and try to use in in osql, but when the dll is deleted or moved to somewhere i think u have no chance unsure.gif
EXPLOiTED
WHAT DLL!!!!!....How do i clear the secured shell locally. Simple question.
DJohn84
EXEC sp_dropextendedproc xp_cmdshell is what you're looking for I believe.
pdf
you can 'kill' and remove the mssql server (to secure sql)

or just change the password so others can't log in smile.gif
cenobite
QUOTE (pdf @ Feb 25 2004, 09:53 PM)
you can 'kill' and remove the mssql server (to secure sql)

or just change the password so others can't log in smile.gif

dont change passwords.. changing passwords is more likely to be temporarily.. The admin will find out and change the password back to it's default
sylver
xpsql70.dll this dll i mean-when its deleted and/or moved i think it could be hard to get another shell....
EXPLOiTED
Sigh....i dont want to Secure it. I want to UNSECURE iIT!!! U N S E C U R E.
Joc00
had the same issue a few time
did
use master
exec sp_dropextendedproc 'xp_cmdshell'
go

then went back and restored again and worked fine.
may help but may not
droplogic66
Hasnt worked for me. :/
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.