MSDE/SQL Checker Tool
From: Jerry Bryant [MSFT] (jbryant@online.microsoft.com)
Date: 01/27/03
- Next message: Jorge Diaz: "Shrink Database permissions"
- Previous message: Mike Roche: "SQL Slammer and SQL 2000 Run-Time"
- Next in thread: x y: "Re: MSDE/SQL Checker Tool"
- Reply: x y: "Re: MSDE/SQL Checker Tool"
- Reply: Bianca Blount: "Re: MSDE/SQL Checker Tool"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Jerry Bryant [MSFT]" <jbryant@online.microsoft.com> Date: Mon, 27 Jan 2003 10:17:23 -0800
We hope to have a download location for this tool later today but as of
right now, it is not publicly accessible. Please veiw the readme file on
it's use (posted below). In the mean time, if you would like to get this
tool, please call 1-866-PCSafety and ask for it directly and it will be
emailed to you.
Disclaimer
=============
THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR
PURPOSE.
This tool is provided to help diagnose version information on SQL Server and
MSDE applications.
SSCHECK.EXE SQL SLAMMER CHECKER
===============================
SQL Slammer Check is used to query the SQL Server and MSDE configuration on
a machine and output the version information for MSDE and the service pack
level. Optionally, SSCHECK will disable ALL SQL Server and MSDE instances on
a server that are not properly patched with SQL Server and MSDE Sp2 and the
Microsoft security update MS02-061.
This tool can be wrapped inside of a logon script, batch file or SMS script
to be customized for any environment. It will output verbose results or
return codes for easier integration into your scripts.
The default behavior is to return an ERRORLEVEL when run with no parameters.
SYSTEM REQUIREMENTS
===================
NT 4.0, Windows 2000, Windows XP Pro
USAGE:
======
SSCheck checks for the version info on ssnetlib.dll and sqlservr.exe, and
takes the following action based on the versions of both files
If SSnetlib.dll >= 534 and SSnetlib < 636 - SP2 installed but instance is
vulnerable
If SSnetlib.dll < 534 SP2 not installed and instance is vulnerable
If SSNetlib.dll > 636 instance not vulnerable
You can run sscheck /? for the command line options
sscheck.exe (/d will shut off the SQL and/or MSDE services on a machine
that is at risk)
sscheck.exe (/v will turn on verbose mode else this is quite)
sscheck.exe (/? will list all option switches and usage)
IF YOU CHOOSE TO DISABLE THE SERVICE
=====================================
Note the MSSQLSERVER and SQLSERVERAGENT services must be enabled but not
started before you apply the security patch found in Q316333 or SP3. To do
this,
1. Go to the Control Panel
2. Go to Administrative Tools
3. Go to the Services applet and double click the SQL Agent Services.
4. Change the Startup Type to Manual or Automatic.
5. Click Apply.
6. Apply the security patch found in Q316333 or SP3.
VERBOSE RESULTS (/V Option:
==================================
"This machine is not running MSDE"
NT4.0 output: "OS is NT 4.0"
"This machine has MSDE on it but MS02-061 has been applied"
"This machine has version of ssnetlib.dll greater than 2000.80.532 and less
than 2000.80.636.00 on it This machine needs to have Q317748 and MS02-061
applied"
"This Machine is running NT 4.0 You need to apply Q258437 before applying
any other hotfix"
"File Version of ssnetlib.dll on this machine is:"
NUMERIC RETURN CODES:
=====================
This application will return the following:
0 - only if the version is 2000.80.679.00 or higher or SQL Server/MSDE is
not installed
1 - if the version is between 2000.80.636.00 and 2000.80.532.00
2 - if the OS is NT4.0 and if the version is between 2000.80.679.00 and
2000.80.532.00
3 - if the version is >= 2000.80.636.00 and < 2000.80.679.00 where the
MS02-061 is recommended to be installed
4 - if the version is below SP2
255 - if there is an error.
-- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! http://www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights.
- Next message: Jorge Diaz: "Shrink Database permissions"
- Previous message: Mike Roche: "SQL Slammer and SQL 2000 Run-Time"
- Next in thread: x y: "Re: MSDE/SQL Checker Tool"
- Reply: x y: "Re: MSDE/SQL Checker Tool"
- Reply: Bianca Blount: "Re: MSDE/SQL Checker Tool"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
