???? MSDE ? ????????

?????? ????????? ?????? ?????????
???? ???????: 325022 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

?????? ?????? ???????? ??? ??? ?????? ?? ??????? ???????? ???? ???? ?????????? ????? ??? ????? ?????, ?? ???? ?? ???? ?? ?????? ??? ????????. ????? ??? ??????? ???? ???? ?? ???? Microsoft Desktop Engine (MSDE) ? Authentication and ????? ??? ????????? ??? ????? ??? ??????? ???? ??????.

??????? ????

????

?????? ????? ???????? ??? ??? ??????????. ???????? ?????????? ?????? ?????? ?????? ????? ??? ??????? ???? ??? ????? ????????. ???? ?????????? ????? ???????? ?????? ???????? ?? ??? ????????, ?? ????? ?????? ????. ?????? ?????? ?????? ????? ???????? ?? ??? ???? ????? ?? ??? ?????? ????? ?????? ?? ????? ????????.

???????? ?? ???????? ????????

????? ?????????? ?? ????????? ? ??????? ???? ????? ????????? ?????? ?? ????? ?????? ?? ????? ?????? SQL Server ? MSDE. ?? ??? ?????? ????? ?? ?????????? ???? ??? ????? ???????? ?? ????? ???????? ??? ???? ????? ????? ?????? ???? OnlyReaders, ?????? ?????????? ??? ??? ????????. ????? ????? ???????? ??? ?????????? ????? ?? ????? ?? ??? ????????; ??? ?? ???? ????? ????????? ???? ???? ????? ?? ?????? ?????????.

?????? ?????? ??? ????????? ?? ?????????? ????????, ???? ??? SQL Server ??? ??????. ?????? ????????? ?? ?????????? ???????? ??? ????? ?????? MSDE ?????? ?????? ???????? OSQL.

???? ???? ???? SA

?????? ????? ???? ???? ????? ??????? ???? ?????? ?? ?? ???? ??? ??? ???? SA ???? ???? ????. ?????? ???? ???? ?????? ?????? ????? ????? ???? ?? ??? ?????? ??? ????? ?????? ?????? ???? ?????? ?? ????? ? ?????? ??????.

?????? ???? ???? ???? SA ??? ????? ?????? MSDE ???????, ???? ??????? ???????:
  1. ??? ????????? ???? ?????? ?????? ?? MSDE ???? ???? ?? ??????? ???? ???? ???? ???? ???????.
  2. ???? ????? ??????, ??? ?? ???? ENTER:

    osql -U sa

    ???? ??? ????? ??? ???? ?????????? ??????? ?? ?? MSDE ???????? ???? SA.
  3. ???? ??????? ??????? ?? ???? ??????, ??? ?? ???? ENTER:

    sp_password null
    'mynewpassword'
    'sa'

    ?????? ??????? ' mynewpassword ' ????? ??????.

    ?????? ?? ???? ????? ??????? ???????, ????? ???? ??? ?? ?? ????? ???? ?????? ?????: ????? ???? ??????.
?????? ??? ???? ?? ?????????? ???? ??? ??? ?????? ?????? ???? ??????? ?? ????? ?????Microsoft:
325003 ????? ????? SQL Server Desktop Engine (MSDE 2000) ???????? ?????? ???????? Osql

?????? ?? ASP

??? ?????? ?? Active Server Pages ??? ?? ?????? ?? ??????? ???????? ??? Windows. ?????? ??? ???? ?? ?????????? ???? ??? ??? ?????? ?????? ???? ??????? ?? ????? ?????Microsoft:
176377 ?????? ??? ???? SQL ???????? ?????? ???????? ?? ASP

??????? ????

?????? ??? ??????? ???? ?????? ?? ?????????? ??????????? ????? ??? ??? ??? ??? ????? ???? ?????? ??? ??? ?????? ????????? ??????? ??? ???? ????? ????????. ????? ??????? ?????? ??????? ?? SQL Server ? MSDE. ???? Microsoft ?????? ??? ????????? ?????. ?????? ??? ???? ?? ??????? ?? ?????? ????Microsoft ?????? ??? ???:
???? ???? Microsoft ??? MS02-034
http://www.microsoft.com/technet/security/bulletin/MS02-034.mspx

?????? We ???? ?? ??? ?????? SQL Server 2000 Service Pack 3 (SP3) ?? SQL Server 2000 SP4. ????? ?????? ?? ????????? ?? ??? ?????? ??? ???? ???? Microsoft ??? MS02-034 ????? ?? ??? ?????? ?????. ?????? ??? ???? ?? ????????? ??? ????? ?????? ??? SQL Server 2000 SP3 ?? SQL Server 2000 SP4 ?? ???? ??? ??? ?????? ?????? ???? ??????? ?? ????? ?????Microsoft:
290211 ????? ?????? ??? ???? ???? ???? SQL Server 2000


??? ?? ???? ????????? ??????? ????? ????? ?????? ????? ????????? ???? ?? ??? ?????? ?????? ?? SQL Server 2000. ??? ??????? ?????? ?????? ??? ????? ?? ???????? ?????? ??????? ??????? ???? ???? ??? SQL Server 2000 ?? SQL Server Desktop Engine (MSDE 2000 ???????? ?????). ??? ??????? ??? (?? ???? ??? ??????? ????? ?? SQL Server ?? MSDE.):
  • ???? ???? ????? ????? ??? ??????? ?? ????? ??????? ?? ????? ??????? ?????? ???????? SQL Server. ?????? ??? ??????? ??????? ????? ??? ??????? ?????? ?????? ?????? ?? ????? ????????. ?? ?? ????? ?? ??? ???????? ?????? ?????? ?????? ???? ?? ???? ???? ????? ??? ?????? ???? ?????? SQL Server.
  • ???? ???? ????? ????? ??? ??????? ?? ????? ???? ??? ??????? ????? ?? ???????? ?? ????? SQL Server. ?????? ??? ??????? ??????? ????? ??? ??????? ?????? ?????? ?????? ?? ????? ????????. ?? ?????? ?? ???????? ?????? ?????? ?????? ????.
  • ????? ??? ????? ??? ?????? ??????? ???? ???? ???? ???? ???? ????? ??? ????? ??????? ???? ????? ????????? ???? ??????. SQL Server ?????? ??? ??????? ??????? ????? ??? ??????? ?????? ???? ???? ??? ????? ????? ????????? ??? ????? ?????? ??? ??????. ?? ?????? ?? ???????? ?? ?????? ??? ??? ?????? ?? ???? ???????. ?????? ??? ???? ?? ??????? ?? ?????? ????Microsoft ?????? ??? ???:
    ???? ???? Microsoft ??? MS02-035
    http://www.microsoft.com/technet/security/bulletin/MS02-035.mspx
??? ????? ???? ?????? SQL Server 7.0 (??? ?? ??? 1.0 MSDE) ?? SQL Server 2000? ?? ???? ???? ?? ??? SQL Server 7.0 ?? SQL Server 2000? ?? ????????? ???? ?????? ?? ????? ????? ????? ???????? ?? ??? ????? ???? Setup.iss. ????? ??????? ????? Setup.iss ?????? ??????? ?? SQL Server ????? ????.

SQL Server 2000 ????? ??? ?????? ??? ????? ????? ??? ????? ??? ??? Setup.iss ??? ?????? ??? ????? ????? ??????. ???? ??????? ???? ???? ?????? ????????? ???? ?????? SQL Server ????? ????? ???? ???? ??? ????? ??????? ?? ?????? ???????:
  • ??? ??? ?????? ???? SQL ?? ??? ????????, ?????? ????? ??? ????? ???? ???? ????? ????? SQL Server ?????? (SA).
  • ???? ????? SQL Server ?? ??? ?????? ????? ?? ?? ??? ?????? Windows " ? ????? ?? ???? ???? ?????? ????? ???? ???? ?? ???? ???? SQL Server.
?? ???? ????????, ??? ????? ???? ?????? ?? ??? Setup.iss. ??? ??????? ?? SQL Server 7.0 Service Pack 4 ?? ????? ????? ?????? ?????? ???? ??????. ?? SQL Server 7.0 Service Pack 4 ? SQL Server 2000 Service Packs 1 ? 2? ????? ???? ????? ???? ????? ?????. ????? ????? ??????? ???????? ??? ???? ??? ????? ???? ???? ????? ??????? ??? ???. ????? ??? ????? ??? ????? ?????? ???? ?? ??????? ?? ??? Setup.iss.

??????

???????? ?? ????? ?????? ????? ??????? ?????? ??? ?????? ?? ?? ????? ???????? ??????? ?????? ?? MSDE ? SQL Server. ???? ???? ?????? ??????? SQL Server ?? MSDE: Windows Authentication and ??? ?????? ?????.

?????? Windows

?????? ?????? Windows NTLM ??????? MSDE. ??? ??? ????? ?????? ?????? ??? ?????????? ???? ????? MSDE ???????? ???? ??????.

?????? ????? ???????

???? ????? ?????? ??? MSDE ???????? " ?????? Windows ?? SQL Server ?????? ???? ?????? ????? ???????. ????? ?? ???????? ?????????? ?? MSDE ?????? SQL Server. ????? ??? ?????? ???????? ????? ???? ???? ???????? ????? ?????? ?? ????? ??????? ????? ???? ???????? MSDE. ?????? ??? ???? ?? ????????? ??? ????? ????????, ?????? ????Microsoft ?????? ??? ???:
????? ????????
http://msdn2.microsoft.com/en-us/library/aa905171(SQL.80).aspx

????? ??? ?????? ?????? ????? ????? ???????

?????? ???????? ????? ????? ??? ???????? ???? ???????? MSDE ?????? ????? ??????? ?? ????? ????? ??????:
SECURITYMODE=SQL
???? ??? ????? ????? MSDE ?????? ?? ?????? ????? ?????? ?????. ?? ??? ???????? ???, ????? ??????? ??? MSDE ???????? " ?????? Windows ?? ?????? ???? SQL.

?????? ?????????? ?? Windows NT ??? ????? ????? MSDE ???????? " ?????? Windows. ??? ????? ????????? ???? ????? Windows 98, ?????? MSDE ?????? SQL

????? ??? ?????? ?????? ????? ??? ????? MSDE

????? ??? ?????? ?? ???????? ?? ?????? ??? ??? ??????? ???? ????? ????? ????? ???????. ??? ???? ?? ???? ????? ????? ??? ??? ?????? ??????? ???? ????. ?????? ???? ?? ?? ?????? ??? ???????? ??????. ?? ??? ????? ????? ????????? ??????? ??? ?? ??????. ?? ????? ??????? ??????? ?? ??? ???? ?????. ?????? ??? ???? ?? ????????? ??? ????? ????? ????? ????????? ?????????? ???????? ???? ??? ??? ?????? ?????? ???? ??????? ?? ????? ?????Microsoft:
322756 ????? ????? ????? ????????? ?????????? ??????? ?? Windows


???? ???????? ??? ????? ???? ??????? ?????? ??????? Windows LoginMode ??????? Windows ??? 1 . ?????? ?????? ????? ?????? ????? ??? ????? MSDE? ??? ????? ??? ?????? ??? 2 . ?????? ?? ??????? ?????? LoginMode ????? ??? ?? ??? ??? ?????? MSDE ?? ?????? MSDE ????????? ?? ???? ???? ????.
  • ?????? LoginMode ??? ??? ?????? MSDE ?? ?????? ??????????, ??? ?????? ?? ??????? ?????? ??????? ???????: HKLM\Software\Microsoft\MSSqlserver\MSSqlServer\LoginMode
  • ?????? LoginMode ??? ??? ?????? MSDE ?? ???? ????, ??? ?????? ?? ??????? ?????? ??????? ???????: \MSSQLServer\LoginMode Server\ SQL HKLM\Software\Microsoft\Microsoft ??? ??????
?????? ???? LoginMode ??? 2 , ???? ??????? ???????:
  1. ?? ???? ??????? ???? ?????? " ????? " ? ??? ?? ???? ?????? MSSQLSERVER ???????? ??? ????? (??? SQLSERVERAgent ) ?????.
  2. ?? ??????? ???? , ???? ??? ????? , ??? regedt32? ??? ?? ???? ??? ????? ???? ???? ???????.
  3. ??? ??? ?? ???????? ??????? ??????? (????????? ??? ?? ??? ??? ?????? MSDE ?? ?????? MSDE ????????? ?? ???? ???? ????):
    • HKEY_LOCAL_MACHINE\Software\Microsoft\MSSqlserver\MSSqlServer\

      ??-
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft \MSSQLServer\ Server\ ??? ???? SQL
  4. ??? ????? ?????? ???? ????? ??????? ??? ??????? ?????? LoginMode .
  5. ?? ???? ?????? ???? DWORD ???? ?????? ?? ??? ??????? ?????? ??? 2 , ???? ?? ?? ?????? Hex ?????? ??? ?? ???? ??? ????? .
  6. ??? ????? ???? MSSQLSERVER ????? SQLSERVERAgent ????? ??? ??????? ??? ???? ????? ???????.

?????

?????? ??? ???? ?? ?????????, ????? ????? ????? Microsoft ??? ??? ???????:
?????? & ??????
http://www.microsoft.com/security
????? ???? Microsoft SQL Server ?? Microsoft Access
http://msdn2.microsoft.com/en-us/library/aa140013(office.10).aspx
SQL Server 2000 Security ????? ?????
http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sp3sec00.mspx
?????? ??? ???? ?? ?????????? ???? ??? ??????? ?????? ?????? ???? ???????? ?? ????? ?????Microsoft:
259710 ???? ???? SQL Fails ???? ??? Windows 9 x ????? ???? ?????? ???? ???? ????? ?????? (SA) PRB:
319930 ????? ??????? ?? Microsoft Desktop Engine
313418 PRB: Unsecured SQL Server ?? ?????? (NULL) ??? ??????? ?? worm ??? ???? ???? ????? ?????? (SA)
285097 ????? ????? ??? ???????? ????????? ?????? ?????? ??? SQL ????? ????? SQL Server 2000 Desktop Engine ?????? ??????? Windows Installer
248683 ?????? Microsoft Data Engine Security ?? ??? ISVs
321698 ?? ???? ??????? ?? MSDE 2000 ???????? ADO.NET ?? ?????? SQL

???????

???? ???????: 325022 - ????? ??? ??????: 03/???? ?????/1428 - ??????: 5.2
????? ???
  • Microsoft SQL Server 2000 Desktop Engine (Windows)
  • Microsoft SQL Server 7.0 Desktop Edition
????? ??????: 
kbinfo kbsecurity KB325022 KbMtar kbmt
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????. ??? ?? ???? ??? ??????? ????? ?? ???????? ?? ??? ???????? ?????? ????? ????????? ??????? ???? ??? ???????
???? ??? ????? ??????? ?????? ??????????325022

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com