Which Version of SQL Server?

[duetltd]

I have a client using a package called ComCash which uses microsoft sql for the database, the tool from norton (fixsqlex) tells me that ssnetlib.dll is vulnerable so I downloaded the sp for sql server 7. when I ran it it said that sql 7 is not on the machine, so I downloaded the sp for sql 2000, it said that sql 2000 is not on the machine. Could this be a different (older) version of ms sql server?

Thanks for your help!

 

[MeanGreen]

Your software could be on SQL Server 6.5. How old is the application you are using?

 

[duetltd]

It's called ComCash they send us the most current version 2 months ago, I have a sample here on NT 4.0 and it keeps getting that worm, but I can't seem to patch it.

Thanks for your help!

 

[duetltd]

Running sscheck /v on it returns:

WinNT4 OS


*************************************************************************
Instance Name: COMCASH
File Version of ssnetlib.dll on this instance is: 2000.80.534.0
File Version of sqlservr.exe on this instance is: 2000.80.679.0
Product Level: "SP2"
***** INSTANCE IS VULNERABLE TO SLAMMER WORM
*************************************************************************

Is this SQL 2000 level 2? Why won't level 3 install?

Thanks again for all your help!

 

[MeanGreen]

The version you have posted for sqlservr.exe is SQL 2000 SP2. To find out information about applying the security patch you can go to the following site:

http://support.microsoft.com/default.aspx?kbid=316333

Hope this helps.

 

[SQLBill]

Where are you trying to APPLY the SP? Sometimes the database is on a separate server than the application. You might be trying to apply it to wrong location and that's why you are getting the error you've been seeing.

-SQLBill

 

[duetltd]

The application (comcash) a point of sale software, creates the following folders:
C:\Program Files\Comcash 8.0C:\Program Files\Microsoft SQL ServerIn the last folder is:
MSSQL$COMCASH
80
the first folder contains the binn folder that has all the dlls that need to be updated.

My thought was that this is a run-time only version of sql 2000 and that's why I can't update it, I may have to contact comcash for the answer.

Thank you everyone for all your help.

 

[SQLBill]

Okay, now we have the facts. Yes, you do NOT have SQL Server 7 or SQL Server 2000 on your machine. You DO have MSDE 2000 on your machine. There is a separate patch for that product. Check your download disk and you should find another folder for the desktop version.


-SQLBill

 

[duetltd]

Thank you SQLBill, (and everyone else) that fixed it!