Microsoft update problem
Results 1 to 7 of 7

Thread: Microsoft update problem

  1. #1
    StOrM™
    Join Date
    Aug 2004
    Posts
    1,003

    Microsoft update problem

    Greeting's

    I just got word from a friend of mine that some of the computers in college are showing up "SQL server feature pack"... Normally only things that are installed on the PC get update checks...

    Like for example.. I have only installed Word Viewer and Exel Viewer on student PC's to reduce risk to a certain extent..

    I just want to know if this new thing being showd up in Microsoft update is okay... Because non of these PC's have SQL installed on them..

    I dont have much detail because I'm home right now..
    Parth Maniar,
    CISSP, CISM, CISA, SSCP

    *Thank you GOD*

    Greater the Difficulty, SWEETER the Victory.

    Believe in yourself.

  2. #2
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    Hi ByTe~ ...........

    Got XP SP2 and those readers here, but no such symptoms?

    I will have to leave it until tomorrow to try a server with SQL..........
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  3. #3
    Disgruntled Postal Worker fourdc's Avatar
    Join Date
    Jul 2002
    Location
    Vermont, USA
    Posts
    797
    I noticed that today as well in my home network, 3 XP boxes and 1 2000 laptop.

    In the manifest of available updates it said there was (0) available updates for SQL server pak.

    None of these systems knowingly had SQL server anything on them.

    Another undocumented feature, BONUS !! (bogus?)
    ddddc

    "Somehow saying I told you so just doesn't cover it" Will Smith in I, Robot

  4. #4
    Super Moderator
    Know-it-All Master Beaver

    Join Date
    Jan 2003
    Posts
    3,914
    Hey Hey,

    nihil didn't see it but the two of you did... I'm wondering if by chance nihil visited the Windows Update site.... Microsoft Update... (which has been around for a bit now -- Mid-2005 I believe. ) is supposed to encompass updates for Windows (Including: IE, Media Player, etc), Office, Exchange and SQL (all the major products). So for it to say SQL (0) wouldn't be that bad.

    WIth Windows Update (besides saying Windows Update or Microsoft Windows Update at the top)... You'll see

    Software
    Software (optional)
    Hardware

    With Microsoft Update you'll see "Windows Update" or "Microsoft Windows Update" replaced with "Microsoft Update"... Then you'll see the same list as above on the left hand side. below that you'll see "By Product" in bold... under that you'll have

    Office ()
    Windows ()
    SQL ()

    So I just ran it.. and I ran Windows Update yesterday but not Office Update... so I had

    Office (9)
    Windows (3) (they were listed as optional on Windows update)
    SQL (0)

    Also... are you positive that none of the servers have SQL (if you saw (0) updates as fourdc did, it's simply bceause of the fact that you were using Microsoft Update and not Windows update most likely)... however if you saw updates... don't forget that SQL 2005 Express and MSDE are both subject to a lot of the same updates as their counterparts (SQL 2005 adn SQL 2000)... so if you just installed an application on some systems that includes either of those products there's a good chance you'd see updates.

    Peace,
    HT
    IT Blog: .:Computer Defense:.
    PnCHd (Pronounced Pinched): Acronym - Point 'n Click Hacked. As in: "That website was pinched" or "The skiddie pinched my computer because I forgot to patch".

  5. #5
    StOrM™
    Join Date
    Aug 2004
    Posts
    1,003
    Greeting's

    HTRegz thanks a lot for that detailed reply.

    I found this on SANS.

    We have received reports from our readers that previously Microsoft Update, MBSA 2.0, and ITMU may not indicate the need to install additional package for this security update if you have Microsoft XML Core Services 4.0 SP2 (but MBSA 1.2.1 did). However, it seems that Microsoft has updated the scan files and is now able to detect the need of additional package.

    From Microsoft Knowledge Base article number (924191):
    If you have multiple versions of the Microsoft XML Parser or Microsoft XML Core Services (MSXML) installed, you may have to install multiple packages for this security update. Additionally, if you install a version of MSXML after you install this security update, you may have to install an additional package for this security update.

    One of our reader suspected the MBSA 2.0, Microsoft Update and ITMU are only considering the patch to be applicable if the MSXML4.DLL was installed as part of a MSI package for XML 4.0:

    Microsoft's patch detection code for Microsoft Update as of 4 PM ADT 10/13/2006 wasn't detecting MSXML4 SP2 if it was installed via the merge module (i.e. as the result of installing a third party product that redistributed Microsoft's code using the Microsoft-approved method for doing this). Sometime between then and now, Microsoft updated the scan files. In the original scan files (released on Tuesday), Microsoft would only consider the patch applicable if the MSI version of MSXML4 SP2 was installed.

    The new scan files work around this - they still detect language-specific variants of the MSI if they are installed (and generate unique UpdateIDs for those variants), but if no MSI is installed it will fallback to the UpdateID that was used in the original scan files if (and only if) the 1033 (i.e. US English) version of the MSI was installed.

    In this aspect, it is recommended that you rescan your systems to determine whether you need any additional patch that was not reported earlier.

    http://support.microsoft.com/kb/924191
    http://support.microsoft.com/kb/925672
    Parth Maniar,
    CISSP, CISM, CISA, SSCP

    *Thank you GOD*

    Greater the Difficulty, SWEETER the Victory.

    Believe in yourself.

  6. #6
    Super Moderator
    Know-it-All Master Beaver

    Join Date
    Jan 2003
    Posts
    3,914
    Originally posted here by ByTeWrangler
    Greeting's

    HTRegz thanks a lot for that detailed reply.

    I found this on SANS.




    http://support.microsoft.com/kb/924191
    http://support.microsoft.com/kb/925672

    I'm kind of confused.. MS06-061 was one of the expected updates... What does this have to do with your SQL issue?
    IT Blog: .:Computer Defense:.
    PnCHd (Pronounced Pinched): Acronym - Point 'n Click Hacked. As in: "That website was pinched" or "The skiddie pinched my computer because I forgot to patch".

  7. #7
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    nihil didn't see it but the two of you did... I'm wondering if by chance nihil visited the Windows Update site.... Microsoft Update... (which has been around for a bit now -- Mid-2005 I believe. ) is supposed to encompass updates for Windows (Including: IE, Media Player, etc), Office, Exchange and SQL (all the major products). So for it to say SQL (0) wouldn't be that bad.

    Spot on target!



    This box is bare XP......................
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides