New SQLServer threat

You should read the actual advisory instead of the vague hype:

http://www.microsoft.com/technet/security/advisory/961040.mspx




On 12/26/08 2:16 AM, in article ul5CSoyZJHA.1336.TakeThisOut@TK2MSFTNGP02.phx.gbl,
"Abba" wrote:

> Hello,
>
> Has anyone installed this? Anything to watch out for?
>
> http://www.informationweek.com/news/security/attacks/showArticle.jhtml?article
> ID=212501876
>
> TIA,
> Abba
>
>
>
 >> Stay informed about: New SQLServer threat 

On Fri, 26 Dec 2008 12:46:33 +0530, Abba wrote:

>Hello,
>
>Has anyone installed this? Anything to watch out for?
>
>http://www.informationweek.com/news/security/attacks/showArticle.jhtml?articleID=212501876

Hi Abba,

If "this" refers to the latest service packs for any SQL Server service
you have running, than I guess that most companies will have them
installed or are in the process of preparing. I'd hope that any
self-respecting business will implement every service pack as soon as
possible after it is released.

As to the so-called vulnerability described, I wouldn't worry about
that. An attacker can only take advantage of it if he is already in the
system (either by authenticating or by taking advantage of a SQL
injection weakness). To me, it sounds as warning people that you expose
your house to burglars if you keep the keys in your house after locking
the door.

--
Hugo Kornelis, SQL Server MVP
My SQL Server blog: http://sqlblog.com/blogs/hugo_kornelis
 >> Stay informed about: New SQLServer threat 

I found that running windows 2008 patched this...

--

http://www.astorandblack.com/
"Abba" wrote in message

> Hello,
>
> Has anyone installed this? Anything to watch out for?
>
> http://www.informationweek.com/news/security/attacks/showArticle.jhtml...ticleID
>
> TIA,
> Abba
>
>
>
 >> Stay informed about: New SQLServer threat