Detections
Analytics

2.4 Ensure 'Database Mail XPs' Server Configuration Option is set to '0'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The Database Mail XPs option controls the ability to generate and transmit email messages from SQL Server.

Disabling the Database Mail XPs option reduces the SQL Server surface, eliminates a DOS attack vector and channel to exfiltrate data from the database server to a remote host.

Solution

Run the following T-SQL command:

EXECUTE sp_configure 'show advanced options', 1;
RECONFIGURE;
EXECUTE sp_configure 'Database Mail XPs', 0;
RECONFIGURE;
GO
EXECUTE sp_configure 'show advanced options', 0;
RECONFIGURE;

See Also

https://workbench.cisecurity.org/benchmarks/24175

Item Details

References: CSCv7|9.2

Plugin: MS_SQLDB

Control ID: 85b3a590f0efb78ce6e64d73cb901d32dc351c193d4da2d82b11626978fdb97f