exec xp_cmdshell - SQL Server Forums

Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums

General SQL Server Forums

New to SQL Server Programming

exec xp_cmdshell

Author

Topic

anirudhagrawal
Starting Member

1 Post

Posted - 2010-12-16 : 01:45:58

Hi every1,
can you please tell me what are the security breach or potential threats of using exec xp_cmdshell stored procedure???ASAP

Anirudh Agrawal

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2010-12-16 : 11:41:03

It gives you access to everything. It's like root access to the OS.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog

X002548
Not Just a Number

15586 Posts

Posted - 2010-12-16 : 12:58:37

Depends on who has access to it.

Brett

8-)

Hint: Want your questions answered fast? Follow the direction in this link
http://weblogs.sqlteam.com/brettk/archive/2005/05/25/5276.aspx

Want to help yourself?

http://msdn.microsoft.com/en-us/library/ms130214.aspx

http://weblogs.sqlteam.com/brettk/

http://brettkaiser.blogspot.com/

Subscribe to SQLTeam.com

SQLTeam.com Articles via RSS

SQLTeam.com Weblog via RSS

- Advertisement -

Resources