DB: MS-SQL Server User Addition

This signature detects attempts to create a new user in Microsoft SQL Server. Note: This can indicate an attacker creating a backdoor account.

Extended Description

Invocation of the sp_adduser procedure could signal the beginning of an advanced intrusion, in which an attacker intends to add, modify or delete information from the SQL database.

References

URL: http://en.wikipedia.org/wiki/MSSQL

Short Name

DB:MS-SQL:USER-ADD

Severity

Minor

Recommended

False

Recommended Action

None

DB: MS-SQL Server User Addition

Extended Description

References

Found a potential security threat?