Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

MS08-052 SQL 2005 Incorrectly Flagging

Updated: 22 May 2010 | 8 comments
IAVchick's picture
0 0 Votes
Login to vote

The update for MS08-052 SQL 2005 is flagging on machines running SQL 2005 lite which automatically comes with Backup Exec. Our server administrators have stated that this update cannot be installed on a lite version of software. How do we get Altiris to stop reporting these assets as vulnerable?

Comments

jharings's picture
01
Dec
2008
0 Votes 0
Login to vote

This would require a change in the pmimport file if warranted. Do your server admins not want it installed or is it not possible to install (your wording doesn't exactly clarify).



Jim Harings
HP Enterprise Services
1st Rule of Connect Club: Mark the post that helped you the most as a 'solution'. 2nd Rule of Connect Club:You must talk about Connect club.

KSchroeder's picture
01
Dec
2008
0 Votes 0
Login to vote

We had a similar request from our office in Germany; they use a software called ACT (not sure if it is the old Symantec ACT or something else; the vendor is SAGE software apparently). The default MS patches successfully stop the DB instance, but can't patch it due to the way it is installed, but they don't restart the services. So the users have to either reboot or maybe manually restart the SQL services. For now we are excluding machine with that app installed from the SQL patches until we find a work-around. Supposedly the vendor will develop a "wrapped" patch that can be deployed via SWD or manually...

Thanks,
Kyle
Symantec Trusted Advisor

For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.

IAVchick's picture
01
Dec
2008
0 Votes 0
Login to vote

Actually, the information I received wasn't clear either. All I know is these servers flagged for the SQL update, DS indicates that SQL Server 2005 is installed on these servers and NS is even erroring the update out. I googled the update and found that "MSP Error: 29565 SQL Server Setup cannot upgrade the specified instance because the previous upgrade did not complete." I notified our Server Admins of this back at the beginning of October and received an email today stating "These servers are Backup Exec servers and have an instance of SQL 2005 that comes with the install for Backup Exec. Altiris is seeing this as a full version of 2005 which is not the case. The update cannot be applied to this "lite" version of SQL 2005. These servers will need to be excluded from the report for this update." I have seen a lot of goofy things over the last 3 years, but not this. My gut is that if it is flagging and erroring like this, then it can be applied. I wanted to get Altiris' opinion.

jharings's picture
01
Dec
2008
0 Votes 0
Login to vote

Hmm... according to this link from MS:http://www.microsoft.com/techn...bulletin/MS08-052.mspx, SQL 2005 Express is NOT affected. I'm guessing that is what is meant by SQL 'lite'.



That would mean that the pmimport is indeed incorrectly targeting the computers.

Jim Harings
HP Enterprise Services
1st Rule of Connect Club: Mark the post that helped you the most as a 'solution'. 2nd Rule of Connect Club:You must talk about Connect club.

KSchroeder's picture
02
Dec
2008
0 Votes 0
Login to vote

What happens if you manually run the patch .exe on one of these machines? Can you step through the wizard to get it updated, or does that fail too?

Thanks,
Kyle
Symantec Trusted Advisor

For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.

Andrew Bosch's picture
04
Dec
2008
0 Votes 0
Login to vote

We've duplicated this issue and are working on a fix.



Thanks,



Andrew

------------------------------------
Principal SQA Engineer
Symantec

jharings's picture
04
Dec
2008
0 Votes 0
Login to vote

Andrew, you're Kyle's hero, you know that?

Jim Harings
HP Enterprise Services
1st Rule of Connect Club: Mark the post that helped you the most as a 'solution'. 2nd Rule of Connect Club:You must talk about Connect club.

Andrew Bosch's picture
05
Dec
2008
0 Votes 0
Login to vote

I won't believe it until he updates his signature to acknowledge that fact...

------------------------------------
Principal SQA Engineer
Symantec