|Applies To||RSA Product Set: ECAT|
RSA Product/Service Type: ECAT
RSA Version/Condition: 4.1.x
Platform (Other): MSSQL Server
Product Name: ECAT
|Issue||In certain environments it is requested that any extended stored procedures should be disabled.|
Web link resources for more information:
Extended Stored Procedures should not be enabled as good practice. In Centre for Internet Security (CIS) Benchmark for SQL Server 2008r2 and 2012, for the Extended Stored Procedures listed, the recommendation is for those stored procedures to be disabled.
An extended stored procedure (xp) is a dynamic link library that runs directly in the address space of SQL Server. You can run extended stored procedures as normal stored procedures. Extended stored procedures are used to extend the capabilities of SQL Server. You can take advantage of the many extended stored procedures that come with SQL Server, or you can write your own.
A specific question regarding the stored procedure called:
There are two types of stored procedures.