RE: MSDE contained in...

From: Bojan Zdrnja <Bojan.Zdrnja(at)FER.hr>
Date: Wed Jan 29 2003 - 03:25:55 EST

> -----Original Message-----

> The following products ship MSDE on their product CD and can use MSDE as a

> Microsoft Access

That's true, but, my question is -> what does Visio, Access and Visual Studio use MSDE for ?
These tools use it for some local data storage. This means that they don't listen for incoming connections and therefore are safe against W32/SQLSlammer (otherwise, I think it would have caused much much more damange). Quick nmap on machine with some of these tools installed will reveal this.

Now, as we all typically use MS' update services for Office, will they patch MSDE as well ?

Best regards,

Bojan Zdrnja

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Wed Jan 29 12:07:11 2003