Re: SQL Server 120 Trial

From: Hal Berenson (haroldb@truemountainconsulting.com)
Date: 01/27/03 

From: "Hal Berenson" <haroldb@truemountainconsulting.com>
Date: Mon, 27 Jan 2003 08:11:29 -0800

The logic, right or wrong, is that since it's only evaluation software you
can just remove it if there is a problem. You are only using it for
evaluation, right?

As much as I hate to say this, you should immediately remove the Enterprise
Evaluation Edition from your machine. In my opinion, user's should not
install this software until Microsoft either re-releases the download with
SP3 pre-installed or at least makes it possible to install SP3 on it. 

--
Hal Berenson
True Mountain Consulting
"Steve" <steve.turnbull@northlincsnet.org> wrote in message
news:039801c2c5f9$a4e9a7a0$cef82ecf@TK2MSFTNGXA08...
> I can appreciate that Microsoft doesn't want to support
> software that is known to be easily 'cracked', but surely
> they should be able to implement a way of keeping this
> software secure?
>
> Everybody is affected by worms such as Slammer, not just a
> few developers running SQL. There must be a hundreds of
> people out there - particularly students - who are using
> all sorts of trial edition software that is exposed to
> security risks.
>
> Thanks for the reply,
> Steve
>
>
>
> >-----Original Message-----
> >Unfortunately, the Evaluation Edition of SQL Server
> cannot be
> >upgraded with security fixes or service packs.  While I
> am interested
> >to hear any official word about the wisdom of
> distributing software
> >with known critical vulnerabilities, I think the best you
> can do for this
> >particular problem now is to follow these Microsoft
> instructions:
> >
> >2) If you cannot apply this patch immediately, the
> following options can
> >limit propagation of the worm:
> >A) Block UDP port 1434 inbound and outbound traffic at
> your firewalls.
> >B) You may also block UDP port 1434 inbound traffic on
> your Microsoft
> >SQL 2000 Servers.  Following this instruction may result
> in support
> >issues as this port performs name resolution.
> >
> >There is usually no support provided for evaluation
> software, but it's
> >hard for
> >me to understand how Microsoft can ignore the fact that
> its evaluation
> >software
> >is contributing to serious and widespread havoc and
> continue that
> >practice, to say
> >nothing about the likelihood anyone currently evaluating
> SQL Server will
> >decide it's
> >just fine and dandy.
> >
> >Steve Kass
> >Drew University
> >
> >
> >Steve wrote:
> >
> >>I have only recently installed the trial version of SQL.
> I
> >>can't afford to upgrade just yet, but I am also unable
> to
> >>install the required service packs/patches to cope with
> >>the Slammer worm.
> >>
> >>I am sure that this could be a major issue, with a lot
> of
> >>people worlwide being unable to correct the problem.
> >>
> >>Is there a workround? Is it possible to successfully put
> >>the patch onto the 120 trial version, even though it
> says
> >>service pack 2 must be installed.
> >>
> >>Help and advice appreciated (don't want to un-install if
> I
> >>don't have to...)
> >>
> >>Steve
> >>
> >>
> >
> >.
> >

Relevant Pages

  • Re: SQL Server 120 Trial
    ... I can appreciate that Microsoft doesn't want to support ... the Evaluation Edition of SQL Server ...
    (microsoft.public.sqlserver.security)
  • Re: Upgrade to full version from evaluation
    ... 2003 evaluation edition to the full edition. ... Remove the client workstation via Server Management. ... Microsoft Online Newsgroup Support ... But my question is do I have to install everything again because ...
    (microsoft.public.windows.server.sbs)
  • Re: SQL Server 120 Trial
    ... just for evaluation - basically I want to see if it ... another developer with SQL), ... by the MSDE via the command line? ... >> I can appreciate that Microsoft doesn't want to support ...
    (microsoft.public.sqlserver.security)
  • Re: Project 2007
    ... download and install service pack 1 and the infrastructure update ... but I seem to recall that when you have been using the evaluation ... Sharing files with customers would not usually fall into ... use this with my customer. ...
    (microsoft.public.project)
  • Re: Project 2007
    ... download and install service pack 1 and the infrastructure update ... but I seem to recall that when you have been using the evaluation ... Sharing files with customers would not usually fall into ... use this with my customer. ...
    (microsoft.public.project)