RE: [Full-Disclosure] SQL Server patch - why doesn't Windows upda te help?

From: John.Airey@rnib.org.uk
Date: 01/31/03

  • Next message: John.Airey@rnib.org.uk: "RE: [Full-Disclosure] SQL Server patch - why doesn't Windows upda te help?"
    From: John.Airey@rnib.org.uk
    To: avalon@coombs.anu.edu.au, netw3_security@hushmail.com
    Date: Fri, 31 Jan 2003 11:27:06 -0000
    

    > -----Original Message-----
    > From: Darren Reed [mailto:avalon@coombs.anu.edu.au]
    > Sent: 30 January 2003 22:23
    > To: netw3_security@hushmail.com
    > Cc: full-disclosure@lists.netsys.com
    > Subject: Re: [Full-Disclosure] SQL Server patch - why doesn't Windows
    > update help?
    >
    >
    > > Windows Update does not cover SQL Server.

    The whole update process from Microsoft is pants. Try installing a new
    Windows 2000 server with SP3 and run both "hfnetchk" and "Windows Update" on
    the machine. You'll see two different sets of updates, with a small union of
    those. You'd at least expect Windows Update to be a subset of updates found
    with "hfnetchk", but it isn't.

    Compare this to Red Hat Network. You can see at a glance whether your
    registered servers are up to date (from anywhere with Internet Access).
    There are probably other Linux distros that do the same.

    It really makes me wonder sometimes why we put up with this rubbish
    software. One could understand this happening if Microsoft had been broken
    up into separate companies, but it hasn't.

    -
    John Airey, BSc (Jt Hons), CNA, RHCE
    Internet systems support officer, ITCSD, Royal National Institute of the
    Blind,
    Bakewell Road, Peterborough PE2 6XU,
    Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 John.Airey@rnib.org.uk

    Nearly everything we believe is second hand. For example, less than 500
    people have seen the Earth from space, yet the majority of people believe it
    is round (OK pedants, an oblate sphere).

    -

    NOTICE: The information contained in this email and any attachments is
    confidential and may be legally privileged. If you are not the
    intended recipient you are hereby notified that you must not use,
    disclose, distribute, copy, print or rely on this email's content. If
    you are not the intended recipient, please notify the sender
    immediately and then delete the email and any attachments from your
    system.

    RNIB has made strenuous efforts to ensure that emails and any
    attachments generated by its staff are free from viruses. However, it
    cannot accept any responsibility for any viruses which are
    transmitted. We therefore recommend you scan all attachments.

    Please note that the statements and views expressed in this email
    and any attachments are those of the author and do not necessarily
    represent those of RNIB.

    RNIB Registered Charity Number: 226227

    Website: http://www.rnib.org.uk
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html



    Relevant Pages

    • RE: [Full-Disclosure] SQL Server patch - why doesnt Windows update help?
      ... HFNetChk and Microsoft Baseline Security Analyzer also failed to warn anyone ... about installing the SQL Server hotfixes or SQL Server Service Pack 3 until ... SQL Server patch - why doesn't Windows update ...
      (Full-Disclosure)
    • RE: Sharing data on the internet?
      ... SQL Server. ... Microsoft Access Support ... Microsoft Security Bulletin MS03-026? ... Running the SCAN program from the Windows Update site will help ...
      (microsoft.public.access.tablesdbdesign)
    • Re: Microsoft look real but afraid to open
      ... Why Microsoft kept in sending it to me and without ending? ... their security watch service ... They *never* send out patches, or anything else, as attachments. ... Only get updates from Windows Update or from links in ...
      (microsoft.public.windowsxp.general)
    • Re: Virus from Microsoft Corporation
      ... Just don't open the attachments... ... microsoft obviously isn't going to email ... Go to Windows Update to get them.. ... > | Newest Critical Upgrade ...
      (microsoft.public.security.virus)
    • Cumulative Patch necessity; cannot open attachment
      ... attachments from Microsoft. ... security patches via email. ... Use windows update for all patches/updates. ...
      (microsoft.public.win2000.security)