Re: MSDE contained in...

From: Stefan Laudat (stefan@worldbank.ro)
Date: 01/29/03

  • Next message: Michael Rowe: "Packet from port 80 with spoofed microsoft.com ip"
    Date: Wed, 29 Jan 2003 02:26:31 +0200
    From: Stefan Laudat <stefan@worldbank.ro>
    To: monty solomon <monty@roscom.com>
    
    

            I'm using at work in my company Websense Reporter for Websense
    Enterprise and McAfee Policy Orchestrator, which, under some
    circumstances (usually the default installation) may install MSDE
    as storage/query engine. It's shipped as third-party/redistribution
    packs. There may be also other products, thus hopefully MS or someone
    else will gather these under a bigger "gray list" other than one
    described at the locations below (which contains only MS proggies).

    > See
    >
    > PSS Security Response Team Alert - New Worm: W32.Slammer
    > http://www.microsoft.com/technet/security/virus/alerts/slammer.asp
    >
    > and
    >
    > Microsoft SQL Desktop Engine (MSDE) 2000 Detection:
    > The link below contains a list of products that include Microsoft SQL Desktop Engine (MSDE) 2000
    > http://www.microsoft.com/technet/security/MSDEapps.asp

    -- 
    Stefan Laudat
    CCNA & CCAI
    -------------
    Do not read this signature under penalty of law.
    Violators will be prosecuted.
    (Penal Code sec. 2.3.2 (II.a.))
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    


    Relevant Pages

    • Re: MSDE contained in...
      ... circumstances may install MSDE ... > The link below contains a list of products that include Microsoft SQL Desktop Engine 2000 ...
      (Bugtraq)
    • Re: MSDE contained in...
      ... Microsoft SQL Desktop Engine (MSDE) 2000 Detection: ... The link below contains a list of products that include Microsoft SQL Desktop Engine 2000 ...
      (Bugtraq)
    • Re: Microsoft statement - Slammer & Analysis Services
      ... Microsoft SQL Desktop Engine Version (MSDE) 2000 SP1, ... > whether Analysis Services is or can be directly affected by the "Slammer" ...
      (microsoft.public.sqlserver.security)
    • Re: MSDE Uninstall Doesnt
      ... manually remove MSDE per Microsoft ... install MSDE default instance ... Remove MSDE named instance using Add/Remove Programs ...
      (microsoft.public.sqlserver.msde)
    • Re: MSDE security (still confused!!!)
      ... MSDE Manager SQL Tools ... > are running W2k or XP and have administrative privileges they can easily> register the installed instance of MSDE with EM and access the data> structure, stored proc etc? ... > I tested it on a computer which is running W2k, I logged in as> Administrator, ran my Setup program to install MSDE, attach .MDF and .LDF,> .NET framework, MDAC and my application. ...
      (microsoft.public.sqlserver.msde)