RE: MS SQL MDF FILE

For things like this, I keep a copy of MSDE running on my laptop that I
can attach any MDF files to. You can get it here, it's free:

http://www.microsoft.com/sql/msde/default.asp

YMMV...

Jonathan


-----Original Message-----
From: Felikz [mailto:securityfocus@felikz.net]
Sent: Monday, March 14, 2005 10:02 AM
To: Irvin Temp
Cc: pen-test@securityfocus.com
Subject: Re: MS SQL MDF FILE

You should be able to "attach" it to any other SQL Server, one step of
this is to select the database owner thus giving you full access to it's

contents.

Irvin Temp wrote:

> Im currently doing a VA of our MS SQL Database
> servers.
> I was able to download a backup of our MDF file from
> one of the DB Server.
>
> When i open the MDF file using "vi" editor in UNIX,
> the
> file appears to be cryptic. Is there a way to decipher
>
> the contents of the file. I would like to show the to
> the
> full extent of the risks involved when an MDF file has
>
> been captured from a database server.
>
> Thanks!
>
> Regards,
>
> HY


Confidentiality Notice: This e-mail communication and any attachments may 
contain
confidential and privileged information for the use of the designated 
recipients named above. If
you are not the intended recipient, you are hereby notified that you have 
received this
communication in error and that any review, disclosure, dissemination, 
distribution or
copying of it or its contents is prohibited. If you have received this 
communication in
error, please notify me immediately by replying to this message and deleting it 
from your
computer. Thank you.