Re: SQL Server 120 Trial
From: Steve (steve.turnbull@northlincsnet.org)
Date: 01/27/03
- Next message: monty: "Re: SP3 install failure/328290"
- Previous message: Nelson: "SQL 2000 Dev Ed and Slammer"
- In reply to: Hal Berenson: "Re: SQL Server 120 Trial"
- Next in thread: Bill Baker: "Re: SQL Server 120 Trial"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Steve" <steve.turnbull@northlincsnet.org> Date: Mon, 27 Jan 2003 11:34:16 -0800
Yes, just for evaluation - basically I want to see if it
is worth forking out a load of money, or just stick to
MSDE. I just want an SQL database, with a GUI rather than
a command prompt. I only need it for local
developmemt/training.
Rather than just thinking of myself in this scenario, I
was thinking of the bigger picture. The very fact that a
lot of people are running this as a 120 trial, means that
there is a large potential risk that the Slammer worm
will remain active, affecting everybody (not just me or
another developer with SQL), by slowing down net traffic.
Hopefully, like you say, MS will release a trial version
with security patches allready in place... until more are
exposed :-).
BTW - Do yopu know of any online resources that offer
good tips on how to get at the various features offered
by the MSDE via the command line? - permission setting
for databases etc...
Cheers
Steve
>-----Original Message-----
>The logic, right or wrong, is that since it's only
evaluation software you
>can just remove it if there is a problem. You are only
using it for
>evaluation, right?
>
>As much as I hate to say this, you should immediately
remove the Enterprise
>Evaluation Edition from your machine. In my opinion,
user's should not
>install this software until Microsoft either re-releases
the download with
>SP3 pre-installed or at least makes it possible to
install SP3 on it.
>
>--
>Hal Berenson
>True Mountain Consulting
>
>
>"Steve" <steve.turnbull@northlincsnet.org> wrote in
message
>news:039801c2c5f9$a4e9a7a0$cef82ecf@TK2MSFTNGXA08...
>> I can appreciate that Microsoft doesn't want to support
>> software that is known to be easily 'cracked', but
surely
>> they should be able to implement a way of keeping this
>> software secure?
>>
>> Everybody is affected by worms such as Slammer, not
just a
>> few developers running SQL. There must be a hundreds of
>> people out there - particularly students - who are
using
>> all sorts of trial edition software that is exposed to
>> security risks.
>>
>> Thanks for the reply,
>> Steve
>>
>>
>>
>> >-----Original Message-----
>> >Unfortunately, the Evaluation Edition of SQL Server
>> cannot be
>> >upgraded with security fixes or service packs. While
I
>> am interested
>> >to hear any official word about the wisdom of
>> distributing software
>> >with known critical vulnerabilities, I think the best
you
>> can do for this
>> >particular problem now is to follow these Microsoft
>> instructions:
>> >
>> >2) If you cannot apply this patch immediately, the
>> following options can
>> >limit propagation of the worm:
>> >A) Block UDP port 1434 inbound and outbound traffic at
>> your firewalls.
>> >B) You may also block UDP port 1434 inbound traffic on
>> your Microsoft
>> >SQL 2000 Servers. Following this instruction may
result
>> in support
>> >issues as this port performs name resolution.
>> >
>> >There is usually no support provided for evaluation
>> software, but it's
>> >hard for
>> >me to understand how Microsoft can ignore the fact
that
>> its evaluation
>> >software
>> >is contributing to serious and widespread havoc and
>> continue that
>> >practice, to say
>> >nothing about the likelihood anyone currently
evaluating
>> SQL Server will
>> >decide it's
>> >just fine and dandy.
>> >
>> >Steve Kass
>> >Drew University
>> >
>> >
>> >Steve wrote:
>> >
>> >>I have only recently installed the trial version of
SQL.
>> I
>> >>can't afford to upgrade just yet, but I am also
unable
>> to
>> >>install the required service packs/patches to cope
with
>> >>the Slammer worm.
>> >>
>> >>I am sure that this could be a major issue, with a
lot
>> of
>> >>people worlwide being unable to correct the problem.
>> >>
>> >>Is there a workround? Is it possible to successfully
put
>> >>the patch onto the 120 trial version, even though it
>> says
>> >>service pack 2 must be installed.
>> >>
>> >>Help and advice appreciated (don't want to un-
install if
>> I
>> >>don't have to...)
>> >>
>> >>Steve
>> >>
>> >>
>> >
>> >.
>> >
>
>
>.
>
- Next message: monty: "Re: SP3 install failure/328290"
- Previous message: Nelson: "SQL 2000 Dev Ed and Slammer"
- In reply to: Hal Berenson: "Re: SQL Server 120 Trial"
- Next in thread: Bill Baker: "Re: SQL Server 120 Trial"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
