Developers who are using SQL Server Service Pack 2 must install this security patch for it. A security issue has been identified in the SQL Server 2005 Service Pack 2 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.
Download Security Patch for SQL Server Service Pack 2
How to Patch SQL Server 2005 Service Pack 2 Safely
Security patches are easy to postpone because nothing looks broken. That is exactly why attackers love old servers. When a fix like this comes out, the safest plan is to test it quickly and install it soon, not wait for a quiet month that never seems to come. An unpatched server is an open door, even if it has run quietly for years.
Before you install any update, check what you are running. This query shows the version, the service pack level and the edition:
SELECT SERVERPROPERTY('ProductVersion') AS Version, SERVERPROPERTY('ProductLevel') AS Level, SERVERPROPERTY('Edition') AS Edition;
Then follow a simple routine:
- Take full backups of your user databases and of the system databases master, model and msdb.
- Read the notes that come with the update so you know which components it touches.
- Install it on a test server first and run your main application against it.
- Plan a short maintenance window, because the update may ask for a restart.
- Run the version query again afterward to confirm the new build number.
Do not skip the last step. A setup screen that says success is nice, but the build number is the real proof, especially on a server with more than one instance.
This post is from 2008. SQL Server 2005 is long out of support, and the download link above belongs to that time. If you still have an instance on this version, security updates are no longer coming, so the real fix is an upgrade to a supported release. Until then, keep that server off the internet and limit who can reach it.
Published by Pinal Dave on SQLAuthority. More of my work at pinaldave.com.
4 Comments. Leave new
Hello Pinal.
Thanks for the Information, I already applied this security Patch two days back.
I wanted to know what will be the changes in these security patches.
I am always scared to apply these security patches… I never know what is logic behind this, I tried to get information about but I could not find it any where ….
if you know any source where I can find actual information about the security patch, not just description.
Thanks,
Imran.
Imran,
Great Question. Before updating my servers I am always scared too. I often wonder, if I have coded something which is using the fault in the system, my new system will not work or create problems.
I am always curious about what my patch contains. When there are information about patch I always read. I have not found what are the information related to current patch. I have received email from one of the reliable source from MS and suggested that potential hacking issue will not occur after installing this.
Again, I have successfully applied to all of my servers and they are currently running all fine. I will ask your question to private user group and try to find out if there are any additional issues.
Kind Regards,
Pinal
Hey!
Is there an easy way to always know about the latest service pack, cumulative and security updates, as soon as they are publised?
I’m looking for RSS or email messages.
Thanks a lot.
tomisbo.
ps : congratulation for your website.
Hi Pinal,
You maintain a great site which answers lot of questions. I downloaded the patch and when I tried installing it fails while applying for SQL Server.
I would appreciate your thoughts.
Thanks,
Ram