SQLSCAN Utility Reports SQL2000 SP4 Installations As Vulnerable
May 17, 2007
Hi-
We are attempting to run the SQLScan utility from the SQL Server 2000 security tools (http://www.microsoft.com/downloads/details.aspx?familyid=9552D43B-04EB-4AF9-9E24-6CDE4D933600&displaylang=en). I have identified 6 systems with a vulnerable installation. Each developer has updated to SP4 and when I run the scan again, I can see that the instance is now at SP4 revision but it still reports that the instance is vulnerable. From all the documentation I have read, SP4 should include all previous patches. Is the SQLSCAN tool not compatible with SP4 and if so, how can I centrally determine whether I have vulnerable version on the network or not?
Is there such a tool for SQL Server 7 as SQLSCAN is for 2000?
I should state also that I am not technically proficient with SQL Server but have been tasked to scan the network for vulnerable versions that we may have and am finding SQL Server to be very confusing indeed.
Is sql2005 backwards compatible to provide reports for FRX? sql2000 is what the software docs ask for. Do I have to migrate and transform the data as a work around? What are the options if any?
Hi All I am new to this forum. I want to know if MSDE can be installed twice (two instances) on a single computer? I will be thankful for details provided by you. Radhesham
Any assistance regarding this would be greatly appreciated.
I am trying to intall SP1 on SQL Server 2005 and am experiencing some difficulties with regards to Authentiction modes.
I have tried to use Windows Authetication for All instances and it states that the account information could not be verified for one or more services. I only have one instance which is the default and have Database Services and Reporting services listed in the Products text box. I have also tried using SQL Server Authentication using the password of a SQL Server account but am still experiencing problems.
Any ideas or suggestions would be greatly appreciated.
They say that the definition of insanity is doing the same thing again and again while expecting a different outcome. I must be going insane.
To top it off, the first time I tried to enter this message the post failed.
I installed visual studio 2005 and SQL express in the spring and began working with them. Life was good. I got distracted for several months and when I went back in I saw the 2008 beta 2 versions of VS and VWD. I uninstalled everything and installed the new versions, but kept having problems with missing links in the help files. I am a newbie, so the help files were important to me so I decided to go back to the old versions.
I deleted everything again, used the MSI cleanup utility to make sure everything was deleted and tried to reinstall the 2005 versions. At one point I got SQL server installed, but had to use a different (besides SQLexpress) instance name and was unable to link it with VWD. I have repeatedly uninstalled and reinstalled (maybe a dozen times) while trying various means of deleting file contents and under the programs/apdata and Microsoft SQL directories and in various sequences to no avail. The latest message is below along with the end of the log file.
Does anyone know a good hosting vendor for the visual studio authoring environment? (just half kidding)
Thanks for any help ... bill
Error message ....
TITLE: Microsoft SQL Server 2005 Setup ------------------------------
The SQL Server service failed to start. For more information, see the SQL Server Books Online topics, "How to: View SQL Server 2005 Setup Log Files" and "Starting SQL Server Manually."
For help, click: http://go.microsoft.com/fwlink?LinkID=20476&ProdName=Microsoft+SQL+Server&ProdVer=9.00.3042.00&EvtSrc=setup.rll&EvtID=29503&EvtType=sqlsetuplib%5cservice.cpp%40Do_sqlShutDownRANUInstance%40sqls%3a%3aService%3a%3aStart%40x3
Log file summary .....
Microsoft SQL Server 2005 9.00.3042.00 ============================== OS Version : Microsoft Windows XP Professional Service Pack 2 (Build 2600) Time : Tue Sep 18 14:29:26 2007
HOMEWXP : The current system does not meet minimum hardware requirements for this SQL Server release. For detailed hardware requirements, see the readme file or SQL Server Books Online. HOMEWXP : Microsoft Internet Information Services (IIS) is either not installed or is disabled. IIS is required by some SQL Server features. Without IIS, some SQL Server features will not be available for installation. To install all SQL Server features, install IIS from Add or Remove Programs in Control Panel or enable the IIS service through the Control Panel if it is already installed, and then run SQL Server Setup again. For a list of features that depend on IIS, see Features Supported by Editions of SQL Server in Books Online. Machine : HOMEWXP Product : Microsoft SQL Server Setup Support Files (English) Product Version : 9.00.3042.00 Install : Successful Log File : C:Program FilesMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0003_HOMEWXP_SQLSupport_1.log -------------------------------------------------------------------------------- Machine : HOMEWXP Product : Microsoft SQL Server Native Client Product Version : 9.00.3042.00 Install : Successful Log File : C:Program FilesMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0003_HOMEWXP_SQLNCLI_1.log -------------------------------------------------------------------------------- Machine : HOMEWXP Product : Microsoft SQL Server VSS Writer Product Version : 9.00.3042.00 Install : Successful Log File : C:Program FilesMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0003_HOMEWXP_SqlWriter_1.log -------------------------------------------------------------------------------- Machine : HOMEWXP Product : MSXML 6.0 Parser (KB933579) Product Version : 6.10.1200.0 Install : Successful Log File : C:Program FilesMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0003_HOMEWXP_MSXML6_1.log -------------------------------------------------------------------------------- Machine : HOMEWXP Product : Microsoft SQL Server Setup Support Files (English) Product Version : 9.00.3042.00 Install : Successful Log File : C:Program FilesMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0003_HOMEWXP_SQLSupport_2.log -------------------------------------------------------------------------------- Machine : HOMEWXP Product : Microsoft SQL Server Native Client Product Version : 9.00.3042.00 Install : Successful Log File : C:Program FilesMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0003_HOMEWXP_SQLNCLI_2.log -------------------------------------------------------------------------------- Machine : HOMEWXP Product : MSXML 6.0 Parser (KB933579) Product Version : 6.10.1200.0 Install : Successful Log File : C:Program FilesMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0003_HOMEWXP_MSXML6_2.log -------------------------------------------------------------------------------- Machine : HOMEWXP Product : SQL Server Database Services Error : The SQL Server service failed to start. For more information, see the SQL Server Books Online topics, "How to: View SQL Server 2005 Setup Log Files" and "Starting SQL Server Manually." -------------------------------------------------------------------------------- Machine : HOMEWXP Product : Microsoft SQL Server 2005 Product Version : 9.2.3042.00 Install : Failed Log File : C:Program FilesMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0003_HOMEWXP_SQL.log Last Action : InstallFinalize Error String : The SQL Server service failed to start. For more information, see the SQL Server Books Online topics, "How to: View SQL Server 2005 Setup Log Files" and "Starting SQL Server Manually." The error is (3) The system cannot find the path specified. Error Number : 29503 -------------------------------------------------------------------------------- Machine : HOMEWXP Product : Microsoft SQL Server Management Studio Express Product Version : 9.00.3042.00 Install : Successful Log File : C:Program FilesMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0003_HOMEWXP_SSMSEE_1.log -------------------------------------------------------------------------------- SQL Server Setup failed. For more information, review the Setup log file in %ProgramFiles%Microsoft SQL Server90Setup BootstrapLOGSummary.txt.
in a prior "legacy" life we couldn't imagine 24x7 implementations because it was important to 1) reorganize databases periodically to remove fragmentation that adversely affected performance and 2) back up databases just in case.
In a 24x7 SQL Server 2005 implementation, high level only, how are these and other maintenance related things accomplished with confidence?
I dont think SQL cleanses its own page splits unsolicited. Are DBAs totally reliant on logs in full recovery installations where db must be up 24x7? What if the devices those logs sit on fail? What if the logs become too large? Is it likely that if you want 24x7 you're looking at Enterrise Edition only?
I'm totally aware of and confident in the sliding window partitioning thing but it seems to me there must be more out there in terms of periodic, more frequent maintenance activity.
I am seeing repeated failures installing SP1 database services with crashes in hotfix.exe being reported and the following appearing in log files:
Property(S): SqlUpgradeMessage = SQL Server Setup has encountered the following problem: [Microsoft][SQL Native Client][SQL Server]Cannot find the object 'dm_exec_query_resource_semaphores', because it does not exist or you do not have permission.. To continue, correct the problem, and then run SQL Server Setup again. Property(S): UpgradeInstruction = Connect to SQL instance ZENO as sysadmin Launch SQL statement USE master Launch script file C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLInstallsysdbupg.sql Launch script file C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLInstallDbEngine_hotfix_install.sql Launch script file C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLInstall epl_hotfix_install.sql Stop service MSSQLSERVER MSI (s) (38:80) [09:35:35:246]: Product: Microsoft SQL Server 2005 - Update 'Service Pack 1 for SQL Server Database Services 2005 ENU (KB913090)' could not be installed. Error code 1603. Additional information is available in the log file C:WINDOWSHotfixSQL9LogsSQL9_Hotfix_KB913090_sqlrun_sql.msp.log.
I have 2 SQL server installs for 2008 R2 configured as multi instances. I have a product called Esri ArcMap 10.3 that can be used to generate a database. When I run the wizard against one installation, the wizard successfully creates the database. When I then run the same against the other installation it fails with the following error [Microsoft][SQL Server Native Client 10.0]Invalid cursor state
I've attempted to look at the configuration of each using select * from master.sys.configurations
From this I found several differences
Successful Mulit instance Optimize for Ad hoc Workloads – False Max Degree of Parallelism - 0
UnSuccessful Multi instance Optimize for Ad hoc Workloads – True Max Degree of Parallelism - 4
I attempted to co-ordinate the differences running the wizard for each iteration but it always failed with the same error above. The error always seems to occur when a particular store procedure is run. There are quite a number of scripts run prior to this and are technically under the covers and only discovered via tracing, in this case using SQL Profiler. I don't have access to individual scripts that I can run incrementally to replicate the issue. I have to rely only on the Esri Wizard.
Reviewing the error against several forums suggests that this is an ODBC error but the trace I ran using SQL Profiler finds that the driver used is Native.
My question then is "What are the conditions that would cause this error above (Invalid Cursor)?" "Is there other configuration settings that are not captured via the SQL identified above?" "Could this be caused by mapped drives for data, Logs and Temp?"
I have installed SQL server 2005 on Win SERVER 2003, then uninstalled and then re-installed but I have found out that the previous instances are still listed and the the previous collation too (I have changed reg setting and and language option re-installation).
It looks like that removing program does not remove completely every object, probably registry values
Do you know how to perform a good uninstallation removing everything (add/remove program does not work properly as written before) ?
I may not sound desparate, but I really am. I have spent many days now trying to install and re-install Microsoft SQL 2005 Express. I still cannot connect to the database! I have read this forum and tried various suggestions, like setting the remote connections and TCP/IP + Named Pipes. Still doesnt work!
The environment is Dell Dimension 24000 (I86) with WinXPPro.
Out of desparation, I downloaded and installed Oracle 10g XE. It works just fine !
My question is: Does the Oracle database server interfere with connecting to the Microsoft SQL 2005 Express server ?
Also, I notice that there are an awful lot of questions posted on this Forum concerning just getting your software up and running. Are there that many stupid folks out there like myself, or has this application been released prematurely ?
My company doesn't allow using Local Service / Network Service accounts for SQL Server. So I created domain service accounts. Can multiple SQL Server installations use the same domain service accounts ?
i have sql2000 & sql2005 on the same machine. I am unable to register my localhost in sql2000, get an access denied error. How can I make my localhost use sql2000 database?
I have downloaded and installed VS C# Express Orcas beta 1. It appears that Express editons ov VS can only connect to SQL2005 Express and not to a high end edition which I have on my computer. In one of the Orcas forums, it was suggested that I can install SQL2005 Express side by side my high end SQL 2005. To play it safe, I wanted to get a confirmation from this forum before I do that. Is a side-by-side installation ok? thanks.
i am in the process of Migrating SQL 2000 to my new SQL2000 server i want to know the what would the best way for me to migrate one SQL server to another SQL server on the same network and rename the new server to the old server and bring it up for use in our ecommerce website.
Hello SQL Server Experts, Data Analysts, and Report Writers et al:
re: Reporting Options with SQL Server
I wanted to propose an offshoot to the pryor thread:
Would anyone take a stab at comparing Access Reports, Crystal Reports, Cognos or other options to all the Reporting Services and its components offered as part ofSQL Server, especially as to extracting data from SQL Server into a report format?
I guess this is a far as capabilites, ease of use, limitations, and especially formatting or presentation of the end report product?
Thank you to all, and I hope this is a beneficial discussion to others.
I have an already published application running several MS SQL Server 2000 Reporting Services report. I need a way to find from either the reporting services log or the application server (IIS) logs or windows log to know the frequency of each report being used.
Based on this info, the business needs to know which reports are being used and to what extend? How can I acheive this?
I have already got the IIS logs and it did not give the required info. I have looked into the Reporting Services logs but it does not provide the info either.
I have an already published application running several MS SQL Server 2000 Reporting Services report. I need a way to find from either the reporting services log or the application server (IIS) logs or windows log to know the frequency of each report being used.
Based on this info, the business needs to know which reports are being used and to what extend? How can I acheive this?
I have already got the IIS logs and it did not give the required info. I have looked into the Reporting Services logs but it does not provide the info either.
My issue is with converting multi-value parameters:
In Crystal Reports, you can set a parameter to accept multiple vales (Discrete, Range or Discrete and Range).
As an example:
I have a database table with a column called ID. I can create a parameter called param_id and set the options of the parameter to "Allow multiple range values".
With this setup, I can limit the result set of the report by comparing the param_id parameter to the ID column in the database. Because param_id is a multi-value range parameter, I can pass it the following data: 1 - 50 60 - 80 150 - 127
This will only return results within those ranges.
Does anyone know if SSRS provides this kind of functionality?
Is there a way to copy reports from other users "My reports" folder? I am logging onto the management studio reporting services using an administrative account and I am able to view the reports from all users' "My Reports" folder. But I am not able to export them as an rdl file. I am able to export reports from other common folders, but not from the "My Reports" folder.
The reason I need to do this is some of the users have created some reports in one environment and the reports are available in their respective "My Reports" folder. I need to move these reports to their corresponding "My Reports" folder in another environment.
I want to know how can i can use the bcp coomand to import a text file into a SQL database table . The text file contains info. like servername , date , time , logininfo and description .
The problem is i cannot import that file into the table through data import wizard . The wizard is not able to separate the fields properly and the import takes place with mixed up data in different columns . The separator in the text file is colon . I even tried fixed length with manual column separation . The text in the text file are not aligned properly as these are log files generated by the system which i am trying to import in a table .
So how can use the bcp command to specify the column length properly and seperate the fields uniformly so that the data gets imported neatly .
Hi, I used bcp utility to import and export data between databases. These exported data is it read only? If so how can I change the parameter so that we could edit as well. Any suggestions will be helpful. Thank you!
I want to use the BCP utility to import data from a .dat file into my database. The .dat file contains a table called xv_Appointments containing the following fields:
In the process of exporting data from SQL data file to text file through BCP utility I am not getting the Column names.How can I get the column names through BCP utility? I used this script exec master..xp_cmdShell 'bcp "select * from regulator.dbo.TEMPTBLBRANCHNOTUPLOAD" QueryOUT \indiadbftprootCLIENT_BRANCH_UPLOADranchnotup loaded.csv -S indiadb -U sa -P sasocrates -k -r -c -t "," -q'
Hello, I am using the DTS utility available with Enterprise Manager in MSSQL server 2000. I can transfer the tables and views without any issues but when i try to transfer the stored procedures it always gives an error. I have tried transferring individual objects too but it does'nt works. The error given is "the user <username> cannot perform the following action". Any help is appreciated. Thanks in Advance
