6.6 Remove sample databases if installed

Information

The Sybase ASE installer does not install sample databases by default. If they have been installed they should be removed.
Rationale:
Removal of sample databases is in accordance with the best practice principal of attack surface reduction.
Note: Nessus has not performed this check, and this check is only provided for informational purposes.

Solution

1. Connect to the ASE server as a user with the sa_role and execute the following SQL statements to determine which sample databases are present:
use master select name from sysdatabases where name = 'pubs2' or name = 'pubs3' or name = 'images' or name = 'jpubs' or name = 'interpubs'
2. Execute the following SQL statement for each database name returned in the query (where <Database> should be substituted for the appropriate database name):
drop database <Database>

See Also

https://workbench.cisecurity.org/files/1612