RE: MSDE contained in...

From: Bruce McLeod (bmcleod@ichips.intel.com)
Date: 01/30/03

  • Next message: Christopher Wagner: "RE: Firewall logging port 6346" 
    From: "Bruce McLeod" <bmcleod@ichips.intel.com>
To: <incidents@securityfocus.com>, <intrusions@incidents.org>, <list-ni@counterpane.com>
Date: Wed, 29 Jan 2003 16:16:17 -0800

    3rd party apps with MSDE.
    http://www.sqlsecurity.com/DesktopDefault.aspx?tabindex=10&tabid=13.com>
     

    -=BM=-
    "Try not. Do. Or do not. There is no try." - Yoda
    Security News - http://news.ists.dartmouth.edu/todaysnews.html

    -----Original Message-----
    From: monty solomon [mailto:monty@roscom.com]
    Sent: Tuesday, January 28, 2003 9:14 AM
    To: incidents@securityfocus.com; intrusions@incidents.org;
    list-ni@counterpane.com; bugtraq@securityfocus.com
    Subject: Re: MSDE contained in...

    See

    PSS Security Response Team Alert - New Worm: W32.Slammer
    http://www.microsoft.com/technet/security/virus/alerts/slammer.asp

    and

    Microsoft SQL Desktop Engine (MSDE) 2000 Detection:
    The link below contains a list of products that include Microsoft SQL
    Desktop Engine (MSDE) 2000
    http://www.microsoft.com/technet/security/MSDEapps.asp

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com

    Relevant Pages

    • MSDE SQL Server Does Not Exist or Access Denied
      ... "SQL Server Does Not Exist or Access ... Denied" when trying to connect to the MSDE Server. ... The security for the database has been opened up to everyone ... condition of the network connection. ...
      (microsoft.public.sqlserver.msde)
    • MSDE Advisory
      ... Visio Enterprise 2000 and VENT 1.0 use MSDE as a database server to ... version of MSDE available on Office 2000/XP media defaults to Windows ... Integrated Security when installed on a Windows NT/2000/XP computer. ...
      (NT-Bugtraq)
    • [NT] Windows .NET Server (RC1) and MSDE Security Vulnerability
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... anyone evaluating .NET Server is vulnerable if IIS 6 has been installed. ... the Microsoft Desktop Engine (MSDE) is also ... vulnerable to the Name Resolution buffer overflows that allow an attacker ...
      (Securiteam)
    • Re: Audit sa logins script
      ... such as physical security, backup, restore, DBAR, ... I know that's not the way MSDE is being used, and I suspect many developers ... view MSDE as an inexpensive way to deploy SQL Server. ...
      (microsoft.public.sqlserver.security)
    • RE: MSDE contained in...
      ... Security News - http://news.ists.dartmouth.edu/todaysnews.html ... Subject: MSDE contained in... ... > Microsoft SQL Desktop Engine 2000 Detection: ... > The link below contains a list of products that include Microsoft SQL ...
      (Bugtraq)