KB970892 and KB970894 for SQL2005 SP3 released 10/12/2009

Question

KB970892 and KB970894 for SQL2005 SP3 released 10/12/2009

DBA in Unit 7

SSCarpal Tunnel

Points: 4059
More actions
October 15, 2009 at 8:34 am

#205637

Microsoft Security October bulletin advised to apply KB970892 and KB970894 to prevent the security issue that 'could allow an attacker to compromise your system and gain control over it.'
Anyone applies it yet? Are you going to?

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

VanessaDBA SSC Eights! Points: 816 More actions · Answer 1

I've applied KB970892 on one of my servers and it appears to be working okay. The sysadmins went rogue on us here and applied KB970894 recently on two of our servers without telling us and database mail stopped working at almost exactly the same time. I'm still in the early stages of investigating this problem, but the timing of the two events makes me think this is more than just mere coincidence. Since this is a security fix, I need to figure out what (if anything) was turned off to keep mail from working correctly. Maybe you'll have better luck, but just thought I'd post this FYI.

SQLDCH SSChampion Points: 11616 More actions · Answer 2

I haven't seen any issues with KB970892 on my systems.

----------------------------------------------------------------------------
Sacramento SQL Server users group - http://sac.sqlpass.org
Follow me on Twitter - @SQLDCH
----------------------------------------------------------------------------

Yeah, well...The Dude abides.

VanessaDBA SSC Eights! Points: 816 More actions · Answer 3

Just thought I'd post an update to our situation in case it helps any others. I was able to pinpoint our database mail problem to the install of KB970894 on top of SP3. For more information on this error I got and why it broke mail, see this website: http://blogs.msdn.com/psssql/archive/2009/12/17/dbmail-has-suddenly-stopped-working.aspx or http://support.microsoft.com/kb/2008286

In our specific circumstance, we were able to fix the problem by applying Cumulative Update 6 to our databases and mail appears to be working again. Hopefully nothing else will break as a result of this update...

Nag469191 SSC Veteran Points: 297 More actions · Answer 4

I have applied Security update KB970894 on SQL server 2005 SP3 system it is succeeded on SQL Server Analysis services, Notification services, Integration services,Server Tools and workstation comp. and FAILED IN DATABASE SERVICES.

I have verified the log located in C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\LOG\Hotfix\SQL9_Hotfix_KB970894_sqlrun_sql.msp.log it gives error

Property(S): SQL200532Hotfix4035 = C:\WINDOWS\Installer\22c14aa8.msp

MSI (s) (80:6C) [05:26:01:293]: Product: Microsoft SQL Server 2005 - Update 'Hotfix 4262 for SQL Server Database Services 2005 ENU (KB970894)' could not be installed. Error code 1603.

after the installation version is as follows:

SQL Server Database ServicesFailed9.00.4230

SQL Server Analysis ServicesSuccess9.00.4262

SQL Server Notification ServicesSuccess9.00.4262

SQL Server Integration ServicesSuccess9.00.4262

SQL Server Tools and Workstation components 2005Success9.00.4262

and (after the installation) noted down the following

SELECT SERVERPROPERTY('ResourceVersion');

9.00.4262

select @@version

Please help us to make to success security update

Thanks in advance