Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

This thread has been marked as locked.
CheeseKing Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Member 6th Jul, 2010 04:36
Ranking: 0
Posts: 15
User Since: 6th Jul, 2010
System Score: 90%
Location: US
Last edited on 6th Jul, 2010 04:37

Whenever I click the solution button to try and patch this program Internet Explorer (ugh..) pops up and says that my system is up to date and doesn't need to be patched. Secunia says otherwise. What can I do to resolve this situation? I'd like to just uninstall it, but it's probably important.

--
MS Windows 7 Home Premium 64-bit
Intel Celeron 450 @ 2.20GHz
4.0GB Dual-Channel DDR2 @ 398MHz
Mozilla Firefox (most recent version available)

mogs

RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
[+]
This reply has been minimised due to a negative Relevancy Score.
Maurice Joyce RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Handling Contributor 6th Jul, 2010 09:07
Score: 11719
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
FINDING A VULNERABILITY FILE PATH
=================================

To locate the exact file that the Secunia PSI has detected, use or switch to the ADVANCED interface, then :

1 Click on the + sign of the programme to "expand' it.
2 Click on Technical Details in the Toolbox to see the installation path of the detected file. (Copy (CTRL+C) & paste (CTRL+V) the Installation Path of the file back to the Forum if U are unsure what to do next.

Revision 2

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
CheeseKing RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Member 6th Jul, 2010 20:42
Score: 0
Posts: 15
User Since: 6th Jul 2010
System Score: 90%
Location: US
@ mogs
I don't think that's my problem, as Internet Explorer doesn't seem to be interfering with my ability to update. It just says there are no updates available. Thank you, though!

@ Maurice
Alrighty, here's the path:

C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.1\sqlcese30.dll

Thanks for the help, guys. What should I do next?

--
MS Windows 7 Home Premium 64-bit
Intel Celeron 450 @ 2.20GHz
4.0GB Dual-Channel DDR2 @ 398MHz
Mozilla Firefox (most recent version available)
Was this reply relevant?
+0
-0
mogs RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Expert Contributor 6th Jul, 2010 21:26
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Just had another look thro' my psi Patched tab and that file path; but without the (x86) is shown secure.
Best be guided by Maurice with regards a possible resolution.....

--
Was this reply relevant?
+3
-0
CheeseKing RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Member 6th Jul, 2010 21:36
Score: 0
Posts: 15
User Since: 6th Jul 2010
System Score: 90%
Location: US
Alrighty, I'll wait for Maurice. Thanks to you too, though, Mogs.

--
MS Windows 7 Home Premium 64-bit
Intel Celeron 450 @ 2.20GHz
4.0GB Dual-Channel DDR2 @ 398MHz
Mozilla Firefox (most recent version available)
Was this reply relevant?
+0
-0
Maurice Joyce RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Handling Contributor 6th Jul, 2010 22:41
Score: 11719
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Take a look at this thread:

http://secunia.com/community/forum/thread/show/320...

Are your details the same dates etc?

If so, are U sure it is showing in the INSECURE tab?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0
CheeseKing RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Member 6th Jul, 2010 23:35
Score: 0
Posts: 15
User Since: 6th Jul 2010
System Score: 90%
Location: US
Last edited on 6th Jul, 2010 23:36
Yep, mine is the same size and date of the one you mentioned in your link. It's the same. I'm sure it's showing it as insecure, as it's the only thing on the list. It seems my problem is the same as the fellow in the link you gave me. If it's nothing serious, I could just tell Secunia to ignore it, but it's odd that it's showing up on my insecure list.

--
MS Windows 7 Home Premium 64-bit
Intel Celeron 450 @ 2.20GHz
4.0GB Dual-Channel DDR2 @ 398MHz
Mozilla Firefox (most recent version available)
Was this reply relevant?
+0
-0
ddmarshall RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Dedicated Contributor 6th Jul, 2010 23:53
Score: 1208
Posts: 960
User Since: 8th Nov 2008
System Score: 98%
Location: UK
There could possibly be a problem with the Secunia rules here. Secunia has two advisories for this product, but if you look at the referenced Microsoft advisories, the Compact Edition isn't listed as affected.
As far as I can see it hasn't been touched since it was released in 2007.

Have you just started using Secunia or has this been flagged up on a system which was previously 100%? This product tags along with some of the Windows Live components. It's strange that both the people having problems have 64bit systems.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+2
-0
CheeseKing RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Member 7th Jul, 2010 00:25
Score: 0
Posts: 15
User Since: 6th Jul 2010
System Score: 90%
Location: US
I just started using Secunia yesterday after reading a favorable review about it. This "SQL Server" thingy has been listed as insecure from the start.

--
MS Windows 7 Home Premium 64-bit
Intel Celeron 450 @ 2.20GHz
4.0GB Dual-Channel DDR2 @ 398MHz
Mozilla Firefox (most recent version available)
Was this reply relevant?
+0
-0
Maurice Joyce RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Handling Contributor 7th Jul, 2010 00:42
Score: 11719
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 7th Jul, 2010 00:46
I agree wioth @ddmarshall. I will ask Secunia Support to look in on this thread & advise. In the meantime as a new member this might be of some assistance to get started:

SETTING UP PSI IN THE ADVANCED MODE
+++++++++++++++++++++++++++++++++++

1. Open PSI by clicking the System tray icon or right click the icon & select Reload Interface.

2.Select the OVERVIEW tab.

3. In the top right corner U will see INTERFACE MODE - SIMPLE/ADVANCED. To be in the advanced mode the word SIMPLE should be blue and advanced black.

4. If advanced is blue click it. A message about advanced users may appear - ignore it - using the advanced mode is easy.

SETTING UP PSI FOR MAXIMUM ASSISTANCE
+++++++++++++++++++++++++++++++++++++

1. Click on the SETTINGS tab.

2. The top box should be empty & the two remaining boxes ticked.

3. Right at the bottom is a facility to create Global Ignore Rules. By default PSI scans & publishes the results on all the hard drives of a PC. OEM partition (reinstallation) drives (normally drive D),second internal or external drives SOLELY used to backup your work & C:\Windows\i386 which can be ignored as they have no exposure. To save confusion in the future (by way of "false positives") U may consider it a good idea to create some Global rules now.

4. A separate Ignore Rule is required for each drive which can be set up as follows:

a.Click on CREATE IGNORE RULE

b.In the RULE NAME BOX insert something like MY BACKUP DRIVE (MY PARTITION DRIVE)

c.In the RULE BOX type D:\(or the drive letter U wish to ignore) - For folder i386 use C:\Windows\i386.

d.Click SAVE IGNORE RULE>CLOSE

All drives will continue to be scanned by default but the result from the ignored list will not be published.

This thread has an article by @Anthony Wells that may also be of help in understanding the advanced mode:

http://secunia.com/community/forum/thread/show/375...

If a new Forum Member U might find these interesting reading as well:

http://secunia.com/vulnerability_scanning/personal...

http://secunia.com/vulnerability_scanning/personal...

Revision 5

Edit: Email request sent - Support should take a look tomorrow.



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0
CheeseKing RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Member 7th Jul, 2010 01:05
Score: 0
Posts: 15
User Since: 6th Jul 2010
System Score: 90%
Location: US
Last edited on 7th Jul, 2010 01:38
Thanks! It'll take me a while, but I'll set up Secunia to the instructions you gave me. Thanks for sending along a report, as well.

Edit: Alright, I've enabled advanced mode and set up a global ignore rule for my D: and C:\Windows\i386 folders.

--
MS Windows 7 Home Premium 64-bit
Intel Celeron 450 @ 2.20GHz
4.0GB Dual-Channel DDR2 @ 398MHz
Mozilla Firefox (most recent version available)
Was this reply relevant?
+0
-0
M.Hansen RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Secunia Official 7th Jul, 2010 10:49
Score: 188
Posts: 410
User Since: 26th Jan 2009
System Score: N/A
Location: Copenhagen, DK
Hi

It seems that Microsoft does not report vulnerabilities in this product.
The SQL Server compact edition seems to arrive from the mobile version. Which Microsoft usually don't "support" in the same way as their "regular" products.

You can still download updates for this program, however, they will most likely be listed as new features, service packs, etc.

If you rescan your system, you will notice that Microsoft SQL Server 2005 Compact edition have disappeared completely.

The reason for this is because we have deleted the program from our database.
Since we can't track the program correctly, it makes no sense in tracking it at all.

I would recommend that you try to download the latest Service Pack for the program to patch the program as much as possible.
http://www.microsoft.com/sqlserver/2005/en/us/comp...

Another general advice:
If you have a program installed that you don't use, consider uninstalling it. It's one less program to keep patched.
Maurice Joyce RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Handling Contributor 7th Jul, 2010 11:23
Score: 11719
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Morten,
Thank U for the assistance.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
mogs RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Expert Contributor 7th Jul, 2010 11:45
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
I think the prog must have come with the computer. I read the description at:-
http://www.microsoft.com/sqlserver/2005/en/us/over... and could'nt see that I needed it. Ran Belarc, and it did'nt make a show. Scanned with psi again, and yes, it's been removed from the patched tab. Revouninstaller was used to remove .

--
Was this reply relevant?
+1
-0
ddmarshall RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Dedicated Contributor 7th Jul, 2010 12:07
Score: 1208
Posts: 960
User Since: 8th Nov 2008
System Score: 98%
Location: UK
It isn't part of Windows, although it's possible an OEM has preinstalled it.

The most likely source for it is a program that needs a small database (probably from Microsoft as other developpers would probably use something else). I know that Windows Live Photo Gallery installed it on my Vista System. If you installed the whole of Windows Live Essentials, I guess you would get it. Maybe they'll get on to 3.5 in the next release.

You also get SQL Server Compact with Visual Studio Express; but that would be 3.5 since 2008.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+2
-0
mogs RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Expert Contributor 7th Jul, 2010 13:06
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Thanks for the info dd !

--
Was this reply relevant?
+0
-0
CheeseKing RE: Problems with "Microsoft SQL Server 2005 Compact Edition 3.x"
Member 7th Jul, 2010 16:47
Score: 0
Posts: 15
User Since: 6th Jul 2010
System Score: 90%
Location: US
Thanks, I'll do all that. And thanks for removing it from the list so it won't show up as insecure anymore.

--
MS Windows 7 Home Premium 64-bit
Intel Celeron 450 @ 2.20GHz
4.0GB Dual-Channel DDR2 @ 398MHz
Mozilla Firefox (most recent version available)
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability