Onderwerp: Re: MSDE contained in...

See

PSS Security Response Team Alert - New Worm: W32.Slammer
http://www.microsoft.com/technet/sec...ts/slammer.asp

and

Microsoft SQL Desktop Engine (MSDE) 2000 Detection:
The link below contains a list of products that include Microsoft SQL =
Desktop Engine (MSDE) 2000
http://www.microsoft.com/technet/security/MSDEapps.asp

I'm using at work in my company Websense Reporter for Websense
Enterprise and McAfee Policy Orchestrator, which, under some
circumstances (usually the default installation) may install MSDE
as storage/query engine. It's shipped as third-party/redistribution
packs. There may be also other products, thus hopefully MS or someone
else will gather these under a bigger "gray list" other than one
described at the locations below (which contains only MS proggies).


> See
>
> PSS Security Response Team Alert - New Worm: W32.Slammer
> http://www.microsoft.com/technet/sec...ts/slammer.asp
>
> and
>
> Microsoft SQL Desktop Engine (MSDE) 2000 Detection:
> The link below contains a list of products that include Microsoft SQL Desktop Engine (MSDE) 2000
> http://www.microsoft.com/technet/security/MSDEapps.asp

--
Stefan Laudat
CCNA & CCAI
-------------
Do not read this signature under penalty of law.
Violators will be prosecuted.
(Penal Code sec. 2.3.2 (II.a.))

3rd party apps with MSDE.
http://www.sqlsecurity.com/DesktopDe...ex=10&tabid=13


-=BM=-
"Try not. Do. Or do not. There is no try." - Yoda
Security News - http://news.ists.dartmouth.edu/todaysnews.html


-----Original Message-----
From: Stefan Laudat [mailto:stefan@worldbank.ro]
Sent: Tuesday, January 28, 2003 4:27 PM
To: monty solomon
Subject: Re: MSDE contained in...

I'm using at work in my company Websense Reporter for Websense
Enterprise and McAfee Policy Orchestrator, which, under some
circumstances (usually the default installation) may install MSDE
as storage/query engine. It's shipped as third-party/redistribution
packs. There may be also other products, thus hopefully MS or someone
else will gather these under a bigger "gray list" other than one
described at the locations below (which contains only MS proggies).


> See
>
> PSS Security Response Team Alert - New Worm: W32.Slammer
> http://www.microsoft.com/technet/sec...ts/slammer.asp
>
> and
>
> Microsoft SQL Desktop Engine (MSDE) 2000 Detection:
> The link below contains a list of products that include Microsoft SQL
Desktop Engine (MSDE) 2000
> http://www.microsoft.com/technet/security/MSDEapps.asp

--
Stefan Laudat
CCNA & CCAI
-------------
Do not read this signature under penalty of law.
Violators will be prosecuted.
(Penal Code sec. 2.3.2 (II.a.))

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ladies and gentlemen of the list:

SQL 7 is not vulnerable to the Slammer worm, in my understanding. That said, the latest version of Websense Reporter provides MSDE 7, based on SQL 7, not SQL 2K, and theoretically should not be vulnerable. Just the same, I patched it up to the latest SQ
L 7 SP to ward off other issues, known and potential, that exist in a base SQL 7 install. I'd rather be safe than sorry with MS patches. Hope this helps.

~~~~~~~~~~~~~~~~~~~~~~~~~

R. Michael Williams, CISSP, GCIH, CSS1
Nashville, TN

615.331.8623 (office)
413.215.7103 (fax)

- -----Original Message-----
From: Stefan Laudat [mailto:stefan@worldbank.ro]
Sent: Tuesday, January 28, 2003 18:27 PM
To: monty solomon
Subject: Re: MSDE contained in...


I'm using at work in my company Websense Reporter for Websense Enterprise and McAfee Policy Orchestrator, which, under some circumstances (usually the default installation) may install MSDE
as storage/query engine. It's shipped as third-party/redistribution packs. There may be also other products, thus hopefully MS or someone else will gather these under a bigger "gray list" other than one described at the locations below (which contains onl
y MS proggies).

<snip>

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBPkHpg4r2NaPj9yL8EQKLpwCgnMhwTFW2bd7I14YQdQa07Y 6mtxkAnRR/
Jc/SFR3zW2UGRR/P9ug/jRhG
=7/4d
-----END PGP SIGNATURE-----