I would have to say from a previous email that MSDE has to be explicitly installed, and is not included with by default installation options. I have : Office XP Pro Visual Studio .Net Visual Studio 6 Visio 2000 Project 2000 & Crystal Reports Dev. 8.5 SQL Client 2000 And no MSDE installed on my workstation. A simple validation would be, (if you have installed Access), to try and launch "NorthwindCS.adp" which uses the MSDE engine and will error out if not installed. Another aside from Retina scanning 1434 udp, is Symantec tool "FixSQLex.exe" which will scan and let you know if you are vulnerable. http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.removal.tool.html Jeremy Ford Sr. Workstation Engineer ITD Enterprise Client Technologies AdvancePCS 9501 E. Shea Blvd., MC 014 Scottsdale, AZ 85260 ( 480-614-7898 + jeremy.fordat_private The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. AdvancePCS |---------+---------------------------> | | "Kurt" | | | <kurtbuffat_private| | | et> | | | | | | 01/28/2003 02:41| | | PM | | | Please respond | | | to kurtbuff | | | | |---------+---------------------------> >---------------------------------------------------------------------------------------------------------------| | | | To: "'Tina Bird'" <tbird@precision-guesswork.com>, <incidentsat_private>, | | <intrusionsat_private>, "'Ced Bennett'" <Ced.Bennettat_private>, <tmdat_private>, "'David | | Hoffman'" <hoffmanat_private>, <eric.nakagawaat_private>, <mnewtonat_private>, | | <tsgat_private>, <tbird65at_private>, <list-niat_private> | | cc: | | Subject: RE: MSDE contained in... | >---------------------------------------------------------------------------------------------------------------| Visio 2000, Enterprise version does indeed install MSDE. That's because it has the network scanner thingy that will build network maps for you automagically. It's the only version that I am aware of that does this. I believe that later Enterprise versions dropped this functionality, and lesser versions (pro, technical, etc.) never had it. | -----Original Message----- | From: Tina Bird [mailto:tbird@precision-guesswork.com] | Sent: Monday, January 27, 2003 20:12 | To: incidentsat_private; intrusionsat_private; | Ced Bennett; | tmdat_private; David Hoffman; eric.nakagawaat_private; | mnewtonat_private; tsgat_private; tbird65at_private; | list-niat_private | Subject: MSDE contained in... | | | Chalk this all up to "things I wish I didn't know": I've | been amused and | skeptical at the list of applications people have claimed | include MSDE, | that are therefore vulnerable to SQL Slammer. In particular, | I had a hard | time believing that Visio used it. Heck, I've got Visio, and | I'm pretty | sure it doesn't open any network connections. | | So I prowled around the Web, and found this: | http://www.microsoft.com/technet/treeview/default.asp?url=/tec hnet/prodtechnol/visio/Visio2002/maintain/vis_msde.asp | | MSDE is integrated with these Microsoft applications: | | Microsoft Visio 2000 Enterprise Edition AutoDiscovery & Layout (AD&L) | solution | AD&L solution from Microsoft Visio Enterprise Network Tools 2002 | Microsoft SharePoint Team Services (a Microsoft FrontPage Server | Extensions 2002 companion product) | Microsoft Project Central (a Microsoft Project 2000 companion product) | Microsoft Application Center | | The following products ship MSDE on their product CD and can | use MSDE as a | database: | | Microsoft Access | Microsoft Office 2000 | Microsoft Visual Studio 6.0 | | --> Bleh. I stand corrected. | | tbird | | -- | I, on the other hand, do not work. I enjoy the slothful life | of an artist, | and while away the hours in meaningless aesthetic pursuits | punctuated by | bouts of hedonistic debauchery and an occasional nap. | -- David Rinehart | | http://www.shmoo.com/~tbird | Log Analysis http://www.loganalysis.org | VPN http://vpn.shmoo.com | | | -------------------------------------------------------------- | -------------- | This list is provided by the SecurityFocus ARIS analyzer service. | For more information on this free incident handling, management | and tracking system please see: http://aris.securityfocus.com | | ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Wed Jan 29 2003 - 09:01:49 PST