MSDE contained in...

Chalk this all up to "things I wish I didn't know": I've been amused and skeptical at the list of applications people have claimed include MSDE, that are therefore vulnerable to SQL Slammer. In particular, I had a hard time believing that Visio used it. Heck, I've got Visio, and I'm pretty sure it doesn't open any network connections.

So I prowled around the Web, and found this: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/visio/Visio2002/maintain/vis_msde.asp

MSDE is integrated with these Microsoft applications:

Microsoft Visio 2000 Enterprise Edition AutoDiscovery & Layout (AD&L) solution
AD&L solution from Microsoft Visio Enterprise Network Tools 2002 Microsoft SharePoint Team Services (a Microsoft FrontPage Server Extensions 2002 companion product)
Microsoft Project Central (a Microsoft Project 2000 companion product) Microsoft Application Center

The following products ship MSDE on their product CD and can use MSDE as a database:

Microsoft Access
Microsoft Office 2000
Microsoft Visual Studio 6.0

--> Bleh. I stand corrected.

tbird

-- 
I, on the other hand, do not work. I enjoy the slothful life of an artist,
and while away the hours in meaningless aesthetic pursuits punctuated by
bouts of hedonistic debauchery and an occasional nap.
                                              -- David Rinehart
http://www.shmoo.com/~tbird
Log Analysis 
http://www.loganalysis.org
VPN 
http://vpn.shmoo.com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek