Administrator username and password revealed

[tomoiaga]

Hello everyone,

I have recently done a fresh install of PLESK 7.6 for Windows and selected SQL Server 2005 for Plesk to store it's settings.

I have windows 2003 server (I do not think this counts)

I noticed that after stopping the SQL server everyone that tryed to connect to Plesk could see the admin account and password.
The following error was displayed:

ERROR: com_exception
<b>Source:</b> Microsoft OLE DB Provider for SQL Server<br/><b>Description:</b> [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied.

0: F:\Plesk\admin\plib\common_func.php3:615
com->open(string 'Provider=SQLOLEDB.1;Initial Catalog=psa;Data Source=localhost', string 'admin', string 'password')
1: F:\Plesk\admin\plib\common_func.php3:615
reconnect()
2: F:\Plesk\admin\plib\common_func.php3:590
db_connect()
3: F:\Plesk\admin\auto_prepend\auth.php3:63

I do not think that is normal, especially for a default Plesk installation !

How can this be corrected ?

Thanks

PS: (Please excuse my english)

 

[IG0R]

another plesk critical bug!

tell me something new