RE: [Full-Disclosure] SQL Server patch - why doesn't Windows upda te help?

From: John.Airey@rnib.org.uk
Date: 01/31/03

  • Next message: Nicob: "[Full-Disclosure] Mirror of the SecurityFocus BID" 
    From: John.Airey@rnib.org.uk
To: jasonc@science.org, avalon@coombs.anu.edu.au, full-disclosure@lists.netsys.com
Date: Fri, 31 Jan 2003 11:32:25 -0000

    > -----Original Message-----
    > From: Jason Coombs [mailto:jasonc@science.org]
    > Sent: 30 January 2003 16:40
    > To: Darren Reed; full-disclosure@lists.netsys.com
    > Subject: RE: [Full-Disclosure] SQL Server patch - why doesn't Windows
    > update help?
    >
    >
    > HFNetChk and Microsoft Baseline Security Analyzer also failed
    > to warn anyone
    > about installing the SQL Server hotfixes or SQL Server
    > Service Pack 3 until
    > a couple weeks before Sapphire. You should never allow a
    > third-party to
    > update code on your boxes, period. Do not use Windows Update.
    >
    I should also have mentioned that some updates (eg Windows NT4) cannot be
    downloaded from Microsoft and you HAVE to use Windows Update.

    My previous comments remain.

    -
    John Airey, BSc (Jt Hons), CNA, RHCE
    Internet systems support officer, ITCSD, Royal National Institute of the
    Blind,
    Bakewell Road, Peterborough PE2 6XU,
    Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 John.Airey@rnib.org.uk

    Nearly everything we believe is second hand. For example, less than 500
    people have seen the Earth from space, yet the majority of people believe it
    is round (OK pedants, an oblate sphere).

    -

    NOTICE: The information contained in this email and any attachments is
    confidential and may be legally privileged. If you are not the
    intended recipient you are hereby notified that you must not use,
    disclose, distribute, copy, print or rely on this email's content. If
    you are not the intended recipient, please notify the sender
    immediately and then delete the email and any attachments from your
    system.

    RNIB has made strenuous efforts to ensure that emails and any
    attachments generated by its staff are free from viruses. However, it
    cannot accept any responsibility for any viruses which are
    transmitted. We therefore recommend you scan all attachments.

    Please note that the statements and views expressed in this email
    and any attachments are those of the author and do not necessarily
    represent those of RNIB.

    RNIB Registered Charity Number: 226227

    Website: http://www.rnib.org.uk
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

    Relevant Pages

    • [Full-Disclosure] Security Industry Under Scrutiny: Part One
      ... I shall make two important points, the historical basis for Full Disclosure ... I spend most of my working day on security issues, ... The information contained in this email and any attachments is ... RNIB has made strenuous efforts to ensure that emails and any ...
      (Full-Disclosure)
    • Re: Save off attachment and start SQL stored procedure
      ... I found code to save off attachments. ... connect EXCEL VBA to SQL Server in Outlook VBA. ... to have either VB6 installed and use its timer control or use a Win32 API ...
      (microsoft.public.outlook.program_vba)
    • RE: [Full-Disclosure] Destroying PCs remotely?
      ... The Music of Senator Orrin Hatch is at www.hatchmusic.com. ... The information contained in this email and any attachments is ... RNIB has made strenuous efforts to ensure that emails and any ... attachments generated by its staff are free from viruses. ...
      (Full-Disclosure)
    • [Full-Disclosure] Security Industry Under Scrutiny: Part 3
      ... You seem to have missed the diagram for your proposed solution. ... Connecting anything to the Internet is a risky business. ... The information contained in this email and any attachments is ... RNIB has made strenuous efforts to ensure that emails and any ...
      (Full-Disclosure)
    • Re: [Full-Disclosure] RE: [Fwd: [TH-research] OT: Israeli Post Office break-in]
      ... This was not a remote attack, at least not the initial attack <setting up ... Certainly not an issue with a publically open port that was ... > and any attachments from your system. ... > those of RNIB. ...
      (Full-Disclosure)