Because ISS recognizes that some customers' environments are Unix-only, we have responded by supporting Internet Scanner 6.x on Linux using an application called VMWare. It discusses the need for and difficulty of assessing OS security. The paper examines OS security scanning software, a solution for automating the assessment of operating system security. It discusses the requirements this scanning software must meet to be truly effective. The operating system under the database must be properly locked, but protection is only half the battle.
Databases maintain their own security subsystems separate from the operating system.
The failure to configure database security leaves your most critical information easy prey for hackers. As the hype surrounding the millennium bug grows, the date nears and the problem becomes a reality to people supporting all kinds of applications, including Microsoft SQL Server. This means that SQL Server will be Y2K compliant if it is used properly. Back Orifice is a backdoor program designed for malicious use. By executing the Back Orifice server program on a machine, an attacker can connect remotely to that specific IP address and perform any of the above actions.