Re: M03-031 Security Patch

From: Narayana Vyas Kondreddi (answer_me_at_hotmail.com)
Date: 07/27/03


Date: Sun, 27 Jul 2003 18:54:47 +0100


>> Do I still need to apply this patch?

I would say Yes. Anyone internal can also take advantage of the
vulnerabilities...right? None of my databases are accessible from Internet,
but we do test the security patches in test environment and deploy them in
the live environment.

--
HTH,
Vyas, MVP (SQL Server)
http://vyaskn.tripod.com/
What hardware is your SQL Server running on?
http://vyaskn.tripod.com/poll.htm
"RG" <nobody@nowhere.net> wrote in message
news:e91UdIGVDHA.2004@TK2MSFTNGP11.phx.gbl...
I am running sqlserver 7 on the internal network of the dmz.  Hence, from
the internet there is no direct route to the database.  Do I still need to
apply this patch?
Thanks in advance,


Relevant Pages

  • Replication over the internet
    ... I want to be able to replicate large volumes of data over the Internet ... between SQL Server 2000 databases. ... The transmissions would be once per day, ...
    (microsoft.public.sqlserver.replication)
  • Re: New SQL Server worm - UDP Port 1434
    ... >> OS and outlook or other, this requires that you have SQL Server ... online service through an ISP in Florida, when I sent them the update ... over the internet - NO SA PASSWORD NEEDED. ... I looked at some of the databases and found ...
    (comp.security.firewalls)
  • Re: Account already in use error
    ... "Emond, Bruno" wrote: ... > Did the compacting of the databases. ... Internet connection itself is not stable and hence you can't contact the ... Mac HD:System Folder:Preferences:PPC Registration Database ...
    (microsoft.public.internet.outlookexpress.mac)
  • Re: Publishing Genealogies
    ... my ISP (Internet Service Provider) BT Yahoo uses my mother's maiden ... One person who posts on this newsgroup referred to me half-jokingly as ... If they have a number of databases containing ... Genealogical researchers are able to use this facility to build up a picture ...
    (soc.genealogy.jewish)
  • Re: [Full-Disclosure] Gates: You dont need perfect code for good security
    ... stored procedures being exposed as Web services. ... slightest clue about system security and secure system design. ... database exposed to the Internet. ... databases and production databases. ...
    (Full-Disclosure)