Microsoft warns of SQL Server vulnerability

Microsoft issued an advisory late Monday confirming a remote code execution vulnerability affecting its SQL Server line.
The vulnerability affects Microsoft SQL Server 2000, Microsoft SQL Server 2005, Microsoft SQL Server 2005 Express Edition, Microsoft SQL Server 2000 Desktop Engine (MSDE 2000), Microsoft SQL Server 2000 Desktop Engine (WMSDE), and Windows Internal Database (WYukon). Microsoft said systems with Microsoft SQL Server 7.0 Service Pack 4, Microsoft SQL Server 2005 Service Pack 3, and Microsoft SQL Server 2008 are not affected by this issue.
From Microsoft's advisory:
Microsoft is aware that exploit code has been published on the Internet for the vulnerability addressed by this advisory. Our investigation of this exploit code has verified that it does not affect systems that have had the workarounds listed below applied. Currently, Microsoft is not aware of active attacks that use this exploit code or of customer impact at this time.
In addition, due to the mitigating factors for default installations of MSDE 2000 and SQL Server 2005 Express, Microsoft is not currently aware of any third-party applications that use MSDE 2000 or SQL Server 2005 Express which would be vulnerable to remote attack. However, Microsoft is actively monitoring this situation to provide customer guidance as necessary.
Microsoft said it was unaware of any active attacks utilizing the exploit code.
The advisory comes less than a week after Microsoft released a critical security patch to plug vulnerabilities in Internet Explorer amid malicious attackers taking advantage of the security flaws.

Sun warns of 'fatal' bugs in MySQL 5.1

Sun has released version 5.1 of the open-source MySQL database software, but the software's founder simultaneously warned of a number of "fatal" bugs present in the new features that are still to be fixed.

Michael "Monty" Widenius, the founder of MySQL, stated

The new features introduced have been ranked as "beta" quality.

There are a number of issues associated with the partitioning feature, such as the difficulty to restore a partitioned table if it crashes, and the chance of losing all data in the event of a server crashing during the rename table feature of a partitioned table. Widenius highlighted that the feature was inefficient, particularly if there were many partitions in a database.

Row-based replication has not been enabled by default, because of a number of problems. Users are advised to test the latest MySQL version before deploying it to production systems.

Speed in Development. Speed in Deployment. Speed in Performance.

PowerBuilder 11.2 will be available shortly and we are holding a Web seminar with John Strano to highlight the key features of this release. During this Web seminar, John will show you the new capabilities found in PowerBuilder 11.2 that bring increased performance to your mission-critical applications, including using AJAX and .NET development to EAServer. In addition, John will show you a range of as well as database, UI, and usability enhancements.

The PowerBuilder 11.2 webcast will cover:

Certificate Store Support for Smart Client-published Applications
Usability and UI Enhancements
Database Connectivity Enhancements
Enabling the DEBUG Condition for ORCA and OrcaScript
Application Pools for Web Forms in IIS7
EAServer Support for .NET-deployed PowerBuilder Clients
AJAX Functionality for WebForm-Deployed Applications

Novalys PowerBuilder Survey 2008: First results available!

Dear PowerBuilder users,
As every year we hold a worldwide survey about PowerBuilder.
Take the survey now and see the 2007 results and a preview of 2008 answers!Last year's results show:- How PowerBuilder projects have evolved between 2001 and 2007- How large projects differ from small ones in terms of architecture- How .NET is now beatting with Java on the field of New technolgies- How many PB projects are also developing .NET applications
Let's keep up with the evolution of PowerBuilder!
Do not hesitate to forward this email to your colleagues concerned with PB.No doubt they will be interested!
Sandra LEVYNovalys - SYBASE Partner since 1995http://www.visual-expert.com