RE: MSDE contained in...

• Previous message: Michael Rowe: "Packet from port 80 with spoofed microsoft.com ip"
• Maybe in reply to: Tina Bird: "MSDE contained in..."
• Next in thread: Johan Augustsson: "Re: MSDE contained in..."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: <kurtbuff@spro.net>
From: jeremy.ford@advancepcs.com
Date: Wed, 29 Jan 2003 09:52:38 -0700

I would have to say from a previous email that MSDE has to be explicitly
installed, and is not included with by default installation options.

I have :
Office XP Pro
Visual Studio .Net
Visual Studio 6
Visio 2000
Project 2000 &
Crystal Reports Dev. 8.5
SQL Client 2000

And no MSDE installed on my workstation.

A simple validation would be, (if you have installed Access), to try and
launch "NorthwindCS.adp" which uses the MSDE engine and will error out if
not installed.

Another aside from Retina scanning 1434 udp, is Symantec tool
"FixSQLex.exe" which will scan and let you know if you are vulnerable.
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.removal.tool.html

Jeremy Ford
Sr. Workstation Engineer
ITD Enterprise Client Technologies
AdvancePCS
9501 E. Shea Blvd., MC 014
Scottsdale, AZ 85260
( 480-614-7898
+ jeremy.ford@advancepcs.com

The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message
is not the intended recipient, or an employee or agent responsible for
delivering this message to the intended recipient, you are hereby notified
that any dissemination, distribution or copying of this communication is
strictly prohibited. If you have received this communication in error,
please notify us immediately by replying to the message and deleting it
from your computer.
Thank you.
AdvancePCS

|---------+--------------------------->
| | "Kurt" |
| | <kurtbuff@spro.n|
| | et> |
| | |
| | 01/28/2003 02:41|
| | PM |
| | Please respond |
| | to kurtbuff |
| | |
|---------+--------------------------->
>---------------------------------------------------------------------------------------------------------------|
  | |
  | To: "'Tina Bird'" <tbird@precision-guesswork.com>, <incidents@securityfocus.com>, |
  | <intrusions@incidents.org>, "'Ced Bennett'" <Ced.Bennett@Stanford.edu>, <tmd@stanford.edu>, "'David |
  | Hoffman'" <hoffman@stanford.edu>, <eric.nakagawa@stanford.edu>, <mnewton@stanford.edu>, |
  | <tsg@shmoo.com>, <tbird65@stanford.edu>, <list-ni@counterpane.com> |
  | cc: |
  | Subject: RE: MSDE contained in... |
>---------------------------------------------------------------------------------------------------------------|

Visio 2000, Enterprise version does indeed install MSDE.

That's because it has the network scanner thingy that will build network
maps for you automagically.

It's the only version that I am aware of that does this. I believe that
later Enterprise versions dropped this functionality, and lesser
versions (pro, technical, etc.) never had it.

| -----Original Message-----
| From: Tina Bird [mailto:tbird@precision-guesswork.com]
| Sent: Monday, January 27, 2003 20:12
| To: incidents@securityfocus.com; intrusions@incidents.org;
| Ced Bennett;
| tmd@stanford.edu; David Hoffman; eric.nakagawa@stanford.edu;
| mnewton@stanford.edu; tsg@shmoo.com; tbird65@stanford.edu;
| list-ni@counterpane.com
| Subject: MSDE contained in...
|
|
| Chalk this all up to "things I wish I didn't know": I've
| been amused and
| skeptical at the list of applications people have claimed
| include MSDE,
| that are therefore vulnerable to SQL Slammer. In particular,
| I had a hard
| time believing that Visio used it. Heck, I've got Visio, and
| I'm pretty
| sure it doesn't open any network connections.
|
| So I prowled around the Web, and found this:
| http://www.microsoft.com/technet/treeview/default.asp?url=/tec
hnet/prodtechnol/visio/Visio2002/maintain/vis_msde.asp
|
| MSDE is integrated with these Microsoft applications:
|
| Microsoft Visio 2000 Enterprise Edition AutoDiscovery & Layout (AD&L)
| solution
| AD&L solution from Microsoft Visio Enterprise Network Tools 2002
| Microsoft SharePoint Team Services (a Microsoft FrontPage Server
| Extensions 2002 companion product)
| Microsoft Project Central (a Microsoft Project 2000 companion product)
| Microsoft Application Center
|
| The following products ship MSDE on their product CD and can
| use MSDE as a
| database:
|
| Microsoft Access
| Microsoft Office 2000
| Microsoft Visual Studio 6.0
|
| --> Bleh. I stand corrected.
|
| tbird
|
| --
| I, on the other hand, do not work. I enjoy the slothful life
| of an artist,
| and while away the hours in meaningless aesthetic pursuits
| punctuated by
| bouts of hedonistic debauchery and an occasional nap.
| -- David Rinehart
|
| http://www.shmoo.com/~tbird
| Log Analysis http://www.loganalysis.org
| VPN http://vpn.shmoo.com
|
|
| --------------------------------------------------------------
| --------------
| This list is provided by the SecurityFocus ARIS analyzer service.
| For more information on this free incident handling, management
| and tracking system please see: http://aris.securityfocus.com
|
|

----------------------------------------------------------------------------

This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

• Next message: Shaw, Kevin: "Take note of products that don't "advertise" they have MSDE/SQL i ntegration."
• Previous message: Michael Rowe: "Packet from port 80 with spoofed microsoft.com ip"
• Maybe in reply to: Tina Bird: "MSDE contained in..."
• Next in thread: Johan Augustsson: "Re: MSDE contained in..."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]