Re: Two Versions of SQL Server 2000, Service Pack 3

From: SQL Server Development Team [MSFT] (sqldev@microsoft.com)
Date: 01/30/03 

From: "SQL Server Development Team [MSFT]" <sqldev@microsoft.com>
Date: Thu, 30 Jan 2003 11:00:17 -0800

What does select @@version return you on those servers that you installed
SP3 on late last year? We have only released one version of SP3, and it was
released on January 17th, version 8.00.760. Sounds to me like you've got
beta versions installed on your servers. 

--
Sincerely,
Stephen Dybing
This posting is provided "AS IS" with no warranties, and confers no rights.
Please reply to the newsgroups only, thanks.
"David" <david.mcnamee@sc.ngb.army.mil> wrote in message
news:050601c2c873$8401a610$89f82ecf@TK2MSFTNGXA01...
> MS released SQL Server 2000 Service Pack 3 late last
> year.  Our boxes were updated and when queried indicated
> that they had SQL Server 2000 Service Pack 3 installed.
> Many servers were exploited that had that version of
> service pack 3 installed.  So now the security personnel
> are telling our entire enterprise NOT to install service
> pack 3, even though I am trying to tell them that the new
> version is okay.  Well, as of Jan 27 there is a new re-
> released version of service pack 3, but since it doesn't
> say it is a "new or re-released" version of service pack
> 3, the "security experts" are still assuming it is the
> vulnerable service pack 3.  Where can I find it in an
> article or documentation that specifically states that the
> current version of service pack 3 that MS has on its
> download page, is in fact a re-release of service pack 3.
> MS seems to be playing with semantics by saying it is a re-
> release of the security patch.  The difference between re-
> releaseing a security patch with a new Q-number, and re-
> releaseing a service pack with the same number is going to
> have negative implications and smells like a cover-up.

Relevant Pages

  • Re: Two Versions of SQL Server 2000, Service Pack 3
    ... the released versions of SP3 for SQL Server and MSDE ... > that they had SQL Server 2000 Service Pack 3 installed. ... > are telling our entire enterprise NOT to install service ... > releaseing a service pack with the same number is going to ...
    (microsoft.public.sqlserver.security)
  • Re: Windows 2003 Service Pack 2 Active Directory Upgrade
    ... In my opinion you should document yourself with your hardware vendor/support ... servers. ... so that you don't install the SP2 during office hours if something ... installation of the service pack. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Two Versions of SQL Server 2000, Service Pack 3
    ... SP3 just happens to include this fix and is the ... easiest way to install the fix BUT sp3 also includes numerous other fixes ... > I installed Service pack iii on the 26th. ... >>> releaseing a service pack with the same number is going ...
    (microsoft.public.sqlserver.security)
  • Re: Two Versions of SQL Server 2000, Service Pack 3
    ... December that refer to SQL Server 2000 Service Pack 3, ... >> are telling our entire enterprise NOT to install service ... >> releaseing a service pack with the same number is going ...
    (microsoft.public.sqlserver.security)
  • Re: Two Versions of SQL Server 2000, Service Pack 3
    ... > that they had SQL Server 2000 Service Pack 3 installed. ... > are telling our entire enterprise NOT to install service ... > releaseing a security patch with a new Q-number, ... > releaseing a service pack with the same number is going to ...
    (microsoft.public.sqlserver.security)