骆驼调频

Camel's FM Blog

MSSQL安全设置

By 骆驼 • 9 28th, 2007 • Category: WebRSS 2.0 Trackback
删除有安全隐患的扩展:
    exec sp_dropextendedproc 'xp_cmdshell'  [删除此项扩展后,将无法远程连接数据库]
    exec sp_dropextendedproc 'xp_dirtree'    [删除此项扩展后,将无法新建或附加数据库]
    exec sp_dropextendedproc 'xp_enumgroups'
    exec sp_dropextendedproc 'xp_fixeddrives'
    exec sp_dropextendedproc 'xp_loginconfig'
    exec sp_dropextendedproc 'xp_regaddmultistring'
    exec sp_dropextendedproc 'xp_regdeletekey'
    exec sp_dropextendedproc 'xp_regdeletevalue'
    exec sp_dropextendedproc 'xp_regread'
    exec sp_dropextendedproc 'xp_regremovemultistring'
    exec sp_dropextendedproc 'xp_regwrite'
    exec sp_dropextendedproc 'xp_enumerrorlogs'
    exec sp_dropextendedproc 'xp_getfiledetails'

* From: 21say.com *


    exec sp_dropextendedproc 'xp_regenumvalues'
    恢复扩展
    exec sp_addextendedproc 'xp_cmdshell', 'xplog70.dll'
    exec sp_addextendedproc 'xp_dirtree', 'xpstar.dll'
    exec sp_addextendedproc 'xp_enumgroups', 'xplog70.dll'
    exec sp_addextendedproc 'xp_fixeddrives', 'xpstar.dll'
    exec sp_addextendedproc 'xp_loginconfig', 'xplog70.dll'
    exec sp_addextendedproc 'xp_regaddmultistring', 'xpstar.dll'
    exec sp_addextendedproc 'xp_regdeletekey', 'xpstar.dll'
    exec sp_addextendedproc 'xp_regdeletevalue', 'xpstar.dll'
    exec sp_addextendedproc 'xp_regread', 'xpstar.dll'
    exec sp_addextendedproc 'xp_regremovemultistring', 'xpstar.dll'
    exec sp_addextendedproc 'xp_regwrite', 'xpstar.dll'
    exec sp_addextendedproc 'xp_enumerrorlogs', 'xpstar.dll'
* From: 骆驼调频 *

    exec sp_addextendedproc 'xp_getfiledetails', 'xpstar.dll'
    exec sp_addextendedproc 'xp_regenumvalues', 'xpstar.dll'

Leave a Reply