At the same time it is touting its SQL Server as an integral part of its .NET Enterprise Server family and a popular choice of financial services firms, Microsoft has issued patches for a handful of new vulnerabilities, some of which are critical. Microsoft issued an advisory and patch for three 'critical' vulnerabilities in its SQL Server 2000 and Microsoft Desktop Engine 2000, "the most serious of which could enable an attacker to gain control over an affected server," Microsoft said.
The Redmond, Washington-based company also issued an advisory and patch for two other 'moderate' vulnerabilities in the same systems.
"Up until this most recent vulnerability, [security holes in SQL Server] have not been as serious," SecurityFocus senior threat analyst Ryan Russell told NewsFactor. "This is a little more direct and to the point. It's more serious than previous holes."
|