(The MSDE engine was installed on two machines for an application we use, and the engine is used only locally by the application. The thought never crossed my mind that the engine was misconfigured with a blank sa password, but on analysis it looks like that's how the application communicates with the database. There's no option to add a password in the application, so I blocked port 1433 to the outside world. Problem solved until we can talk to the vendor.)
Best reagards, m.esco
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html