Microsoft KB Archive/814204

= Windows Server 2003 RC1 and RC2 Users Who Have UDDI Services and MSDE 2000 Installed May Be Vulnerable to the Slammer Worm =

Article ID: 814204

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Web Edition

-



SUMMARY
This article describes how users who have UDDI Services and Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) installed can protect their computers from the Slammer worm.

When you installed UDDI Services Database components with the Release Candidate 1 (RC1) or Release Candidate 2 (RC2) version of the products that are listed at the beginning of this article, you may have chosen to install MSDE 2000. If you installed MSDE 2000, you may be vulnerable to the Slammer worm. For more information about the Slammer worm, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/alerts/slammer.mspx



MORE INFORMATION
If you installed UDDI Services Database components and MSDE 2000, you can install SQL Server 2000 Service Pack 3 (SP3) to protect your computer against the Slammer worm.

How to Obtain and Install SQL Server 2000 SP3 for MSDE with UDDI Services Database Components
 Download SQL Server 2000 Desktop Engine SP3. To do so, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?familyid=90dcd52c-0488-4e46-afbf-acace5369fa3&displaylang=en

Click your language in the Full Download list, click Go, and then click Sql2KDesksp3.exe. Double-click the SQL2KDeskSP3.exe file, and then extract the files to an installation folder. For example: C:\Sql2ksp3. Copy the Sqlrun.dat file from the i386 folder on the Windows Server 2003 CD-ROM to the Msde\Setup folder that is created in the folder to which you extracted the files in step 2. For example: C:\Sql2ksp3\Msde\Setup. Click Start, click Run, type cmd in the Open box, and then click OK. Type cd /d \msde (where   is the path to the extracted service pack files), and then press ENTER.

For example, type cd /d C:\Sql2ksp3\Msde, and then press ENTER. Type setup /upgradesp sqlrun instancename= blanksapwd=1 (where   is the name of the UDDI Services instance to which you installed the UDDI Services Database components), and then press ENTER.

For example, if your UDDI Services instance has the default name of &quot;UDDI,&quot; type the following command, and then press ENTER:

setup /upgradesp sqlrun instancename=uddi blanksapwd=1

Note The UDDI Services instance name appears on the Database Connection tab in the Web site properties.

List of Bugs Fixed by SQL Server 2000 Service Packs
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

306908 INF: List of Bugs Fixed by SQL Server 2000 Service Packs

SQL Server 2000 SP3 Readme
To view the SQL Server 2000 ReadMe file, visit the following Microsoft Web site:

http://support.microsoft.com/kb/889551

SQL Server 2000 SP3 Readme Addendum
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

330022 INF: SQL Server 2000 Service Pack 3 Readme.htm Additions

Additional query words: KB814040

Keywords: kbsecvulnerability kbsecurity kbinfo KB814204

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.