Thursday, 23 June 2011

Microsoft SQL Server: A problem to be solved

"Microsoft indicates a problem of security for Microsoft SQL Server 2000 and SQL Server 2005"

The end of 2008 is registering many security problems in Microsoft products, after the extraordinary update for Microsoft Internet Explorer - came a few days of patch day of December - a bulletin of security indicates a problem against SQL Server 2000 and SQL Server 2005.

Currently, it is not yet available a patch, but fortunately there are no malicious actions carried out by using this specific problem. In the notes of Microsoft argued are different considerations that lead to a cautious optimism: the problem detected allow code execution on a machine vulnerable working remotely, but fortunately does not seem to be so used by any of malware.

Also in the note circulated by Microsoft indicates that some products - including Microsoft SQL Server 7.0 Service Pack 4, Microsoft SQL Server 2005 SP3 and Microsoft SQL Server 2008 - are immune from the problem. Microsoft is investigating the problem as a whole in order to create a patch that will be distributed on the next January 13, or in extraordinary ways.

For the time being in the Bulletin Microsoft Security Advisory 961040 available for some operations are useful to solve the problem temporarily.

No comments:

Post a Comment