Yes the attachments are stored in the database. To check the size used by attachments check the info under:
Admin panel > dashboard > information > database space used for attachmentsRemoving attachments itself can then be done via the database (need to look up the details tomorrow if you want to know it) or by deleting the tickets with really large attachments.