Fortify Warns Over SQL Attack

SAN MATEO, Calif. -- Fortify Software, the application vulnerability security specialist, has warned companies using Microsoft's ASP (Active Server Page) technology - Microsoft's server-side script engine for dynamically-generated Web pages - to be watch out for SQL Injection attacks.

"Although Microsoft ASP is a powerful component in the Windows 2000 Server stable of offerings, it seems that hackers have latched on to the fact that many companies have created poorly-written Web code that interfaces with their Web sites'' back-end database," said Rob Rachwald, Fortifys director of product marketing.

Microsoft Corp.