SQL Server Flaw for Your Holiday Stocking
December 25, 2008
Wow, another flaw in the Microsoft enterprise data management system, SQL Server. You can read “Microsoft Acknowledges Critical SQL Server Flaw” here. The issue is another remote code execution issue. Affected systems include, if the report is accurate:
- Microsoft SQL Server 2000
- Microsoft SQL Server 2005
- Microsoft SQL Server 2005 Express Edition
- Microsoft SQL Server 2000 Desktop Engine
- Microsoft SQL Server 2000 Desktop Engine
- Windows Internal Database.
As I write this (December 24, 2008), there is no fix. Microsoft is believed to be working on the issue. With SQL Server flaws like this remote code execution, I ask, “Is it time to look elsewhere for mission critical data management systems?” I am getting a bit tired of the continuous cycle of “it’s broken” then “oh, now it’s fixed” and “yep, it’s broken”. What about you? SQL Server is more important to me than a Zune upgrade. Perhaps the priorities at Microsoft could use a close look?
Stephen Arnold, December 24, 2008