Microsoft has SQL Fix?
by Taylor Flatt on December 24th, 2008 at 1:50 pm EDT - 318 views
Since April, Microsoft has allegedly been working on a fix for this bug but according to Bernhard Mueller, Microsoft has had a fix for this bug for months. So why, might I ask, have they not released this fix or better yet, informed the community about this fix? Although speculation has risen on the actual time of release, many think it will be released at their next update session which is roughly 3 weeks from today.
I, for one, am outraged by this who scenario. Like that of the IE bug, this is a serious problem that needs addressed. Even though Microsoft claims this hasn’t been exploited fully, that is no reason to not release an emergancy update for this half a year problem.
However, Microsoft has acted in a very nondynamic way by issuing a statement urging their users to grab a work around script that automatically denies permissions to certain parts of the database so that the chances of explotation are less.
What are your comments and questions about this? For more information, click here.