Newest SQL Patch

Posted: December 19, 2008 in Uncategorized

 

Well there is a new SQL Server Injection attack that is going around. It looks like they are using the stored procedure sp_replwriteovarbin as a way to create havoc on your system. To read more about this, Google “sp_replwriteovarbin”. I made mention of this to Stephen Wynkoop and he included it in the newsletter for SSWUG. Stephen made some good points in the newsletter about way that you can avoid this and I thought they were great tips seeing how it is right before the major holiday season. I would like to Thank Sarah Barela for bringing this to my attention. When her and I talked about it she was well on her way to getting protective measures in place.

Something that I have always found of interest and please let me know if you think I am crazy. It always feels to me like these come out the week before or the week of a major time off period. Times like Spring Break, Christmas or even the start of the summer like we had this year. Is it just me? Maybe there is something that we should look at if these time frames match up like they do in my mind.

Back to the topic, there looks like Microsoft released an update to help with those who may be impacted by this. So you may want to head over there and check it out before you take off to enjoy some time away.

About these ads
Comments
  1. Buck Woody says:

    Chris – I looked for this but couldn’t find it. I subscribe to this: http://technet.microsoft.com/en-us/security/default.aspx and they haven’t mentioned it either. Can you post a link (that doesn’t use Java) so that we can hit the “official” Microsoft site?

    Thanks!

  2. Hope Foley says:

    Here’s some information on this from Microsoft:

    http://www.microsoft.com/technet/security/advisory/961040.mspx

  3. chrisshaw says:

    From My understanding this is a patch for IE7.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s