Re: SQL Server 120 Trial

From: Steve (steve.turnbull@northlincsnet.org)
Date: 01/27/03 

From: "Steve" <steve.turnbull@northlincsnet.org>
Date: Mon, 27 Jan 2003 03:45:52 -0800

I can appreciate that Microsoft doesn't want to support
software that is known to be easily 'cracked', but surely
they should be able to implement a way of keeping this
software secure?

Everybody is affected by worms such as Slammer, not just a
few developers running SQL. There must be a hundreds of
people out there - particularly students - who are using
all sorts of trial edition software that is exposed to
security risks.

Thanks for the reply,
Steve

>-----Original Message-----
>Unfortunately, the Evaluation Edition of SQL Server
cannot be
>upgraded with security fixes or service packs. While I
am interested
>to hear any official word about the wisdom of
distributing software
>with known critical vulnerabilities, I think the best you
can do for this
>particular problem now is to follow these Microsoft
instructions:
>
>2) If you cannot apply this patch immediately, the
following options can
>limit propagation of the worm:
>A) Block UDP port 1434 inbound and outbound traffic at
your firewalls.
>B) You may also block UDP port 1434 inbound traffic on
your Microsoft
>SQL 2000 Servers. Following this instruction may result
in support
>issues as this port performs name resolution.
>
>There is usually no support provided for evaluation
software, but it's
>hard for
>me to understand how Microsoft can ignore the fact that
its evaluation
>software
>is contributing to serious and widespread havoc and
continue that
>practice, to say
>nothing about the likelihood anyone currently evaluating
SQL Server will
>decide it's
>just fine and dandy.
>
>Steve Kass
>Drew University
>
>
>Steve wrote:
>
>>I have only recently installed the trial version of SQL.
I
>>can't afford to upgrade just yet, but I am also unable
to
>>install the required service packs/patches to cope with
>>the Slammer worm.
>>
>>I am sure that this could be a major issue, with a lot
of
>>people worlwide being unable to correct the problem.
>>
>>Is there a workround? Is it possible to successfully put
>>the patch onto the 120 trial version, even though it
says
>>service pack 2 must be installed.
>>
>>Help and advice appreciated (don't want to un-install if
I
>>don't have to...)
>>
>>Steve
>>
>>
>
>.
>

Relevant Pages

  • Re: Cannot setup SQL Mail on SBS 2003
    ... Microsoft CSS Online Newsgroup Support ... Cannot setup SQL Mail on SBS 2003 ... The account you use to start the SQL Server service must be a domain ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot setup SQL Mail on SBS 2003
    ... the newsgroups are staffed weekdays by Microsoft Support professionals to ... server since Exchange server has intalled on the box. ... However if you want to configure SQL to send mail you need to install ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: SSIS as part of scheduled job fails
    ... An SSIS package does not run when you call the SSIS package from a SQL ... Microsoft SQL Server Management Studio ... I ended up contacting Microsoft and opening a support case. ...
    (microsoft.public.sqlserver.dts)
  • Re: Creating a database on a local Sql Server Express
    ... It is using the Sql Server ADO.NET ... Thank you for using Microsoft MSDN Managed Newsgroup. ... Microsoft Online Community Support ...
    (microsoft.public.sqlserver.setup)
  • RE: Backup Failures
    ... Microsoft CSS Online Newsgroup Support ... >Thread-Topic: Backup Failures ... Apparently VSS cannot backup an SQL ...
    (microsoft.public.windows.server.sbs)