On September 2nd 2009 Sentrigo released its Passwordizer tool to secure a Microsoft SQL Server vulnerability that enables unencrypted user passwords to be seen openly, by reviewing the contents of the process memory.
Many users utilize a common set of passwords for multiple applications in both business and personal use. Therefore, we believe the threat of having these passwords exposed is a serious security risk.
By running the Passwordizer utility, you will erase these passwords so that no administrator (or hacker pretending to be an administrator) will be able to access them. Following the instructions provided in the FAQ will allow you to set up the tool to run automatically, and also ensure the tool is not turned off without notification.
This vulnerability exists in SQL Server 2000, SQL Server 2005, and SQL Server 2008, running on all supported Windows operating systems.
Downloading Passwordizer from Sentrigo’s website is free of charge.