Help Testing MS SQL Audit Scripts

[gbugbear at gmail.com (Tim Mugherini)]

Carlos

Had some time this AM to run against 2k5 SQL with SP3. Seemed to run without
any errors. I like the script good info. One thing I did note.

EVERITY:
High



 DESCRIPTION: MS SQL was found not to have all current hotfixes. Installing
all hotfixes will help
 mitigate worms and
attacks.



 SOLUTION: Install MS SQL 2005 SP3+Q961930 (Cumulative HF2)
 http://www.microsoft.com/sql/downloads

The Link is a dead link the KB can be found here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;961930. Also these
seem to be bug fixes only and one must call support to get the update. If
issues are not associated with these fixes then there are charges for the
call (just a FYI to everyone). See How to obtain hotfix for more info.

I ll will try to get some time on the 1 2000 SQL system I have (no 2k8 yet)






On Tue, Jul 14, 2009 at 11:07 PM, Tim Krabec <tkrabec at gmail.com> wrote:

> I will run them shortly, on a 2k3w/2k5 but it will have to be at least
> monday.
>
>
>
> 2009/7/14 Carlos P?rez <carlos_perez at darkoperator.com>
>
> > Sysadmin, those tables are temp tables and the get dropt when finnished
> >
> > Sent from my iPhone
> >
> > On Jul 14, 2009, at 8:28 PM, Tim Mugherini <gbugbear at gmail.com> wrote:
> >
> > Hi Carlos
> >
> > I might have some test systems I can run these against. Havn't had time to
> > look at them all yet but looking at 2k5 looks like you have some create
> > tables and inserts in there. How do you want this run? With what privledge?
> >
> > On Tue, Jul 14, 2009 at 12:06 AM, Carlos Perez <<carlos_perez at darkoperator.com>
> > carlos_perez at darkoperator.com> wrote:
> >
> > > Hi Guys
> > >     I wrote this 3 Microsoft SQL audit T-SQL script for when doing
> > > security checks at clients, I have to fix a bit the solution steps and all
> > > the miss spelled words, your help is greatly appreciated in helping out to
> > > make sure that all tests are being done properly. The scripts are for SQL
> > > 2000, SQL 2005 and SQL 2008.
> > >
> > > Thanks,
> > > Carlos
> > >
> > > _______________________________________________
> > > Pauldotcom mailing list
> > >  <Pauldotcom at mail.pauldotcom.com>Pauldotcom at mail.pauldotcom.com
> > >  <http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom>
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: <http://pauldotcom.com>http://pauldotcom.com
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: <http://pauldotcom.com>http://pauldotcom.com
> >
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
>
>
>
> --
> Tim Krabec
> Kracomp
> 772-597-2349
> smbminute.com
> kracomp.blogspot.com
> www.kracomp.com
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090716/179be768/attachment.htm