The "quick and easy" SQL Server fixes

UPDATE 11:35 UT Microsoft's page on Mr Slammer Microsoft's release of SP3 for SQL Server, which we reported on last week, may be a little easier than the method listed in our original story below, if you can stand the 55MB download...

The patch itself is released here, and has an installer. And, in addition, SP3 also includes this fix, while latest security bulletins are here.

And below is our earlier story:

THE TWO ORIGINAL CERT alerts are here and here, both of which are fixed by one Microsoft patch (MS02-039, Q323875) - which you can find here on the MS site.

The following is the installation directions for the current cumulative security hot-fix for SQL server (the one you are supposed to install) here.

Just to show you why it takes so long to do and why two people are required (one to do, one to check) -

To install the hotfix, follow these steps:

1. Install SQL Server 2000 Service Pack 2. Do not continue with the installation until you successfully install SQL Server 2000 Service Pack 2.

2. Shut down the Microsoft SQL Server and the SQL Server Agent services.

3. Make a backup copy of: a. The Sqlservr.exe, Odsole70.dll, Xpqueue.dll, Xprepl.dll, Xpweb70.dll, Xplog70.dll, Ssnetlib.dll, Sqlcmdss.dll, Sqlagent.dll, Sqlagent.exe and Xpstar.dll files from the Binn folder and the Sqlservr.pdb file from the <Installation path for this SQL Server instance>BinnExe folder.

b. The Impprov.dll, rdistcom.dll, Replmerg.exe, Rinitcom.dll, Logread.exe and qrdrsvc.exe files from the <%ProgramFiles%>Microsoft SQL Server80COM folder.

c. The Instdist.sql, Replcom.sql, Replmerg.sql, Repltran.sql, and Replsys.sql files from the <Installation path for this SQL Server instance>install folder.

d. The sqlcmdss.rll and sqlagent.rll files from the <Installation path for this SQL Server instance>BinnResources folder.

e. The Distmdl.ldf and the Distmdl.mdf files from the <Data path for this SQL Server instance>Data folder.

4. Next, copy:

a. The Sqlservr.exe, Odsole70.dll, Xpqueue.dll, Xprepl.dll, Xpweb70.dll, Xplog70.dll, Ssnetlib.dll, Sqlcmdss.dll, Sqlagent.dll, Sqlagent.exe and the Xpstar.dll files from the hotfix self-extracting archive into the <Installation path for this SQL Server instance>Binn folder, and then copy the Sqlservr.pdb file into the <Installation path for this SQL Server instance>BinnExe folder.

b. The Impprov.dll, rdistcom.dll, Replmerg.exe, Rinitcom.dll, Logread.exe and qrdrsvc.exe files from the hotfix self-extracting archive into the <%ProgramFiles%>Microsoft SQL Server80COM folder.

c. The Instdist.sql, Replcom.sql, Replmerg.sql, Repltran.sql and the Replsys.sql files from the hotfix self-extracting archive into the <Installation path for this SQL Server instance>install directory.

d. The sqlcmdss.rll and sqlagent.rll files from the hotfix self-extracting archive into the <Installation path for this SQL Server instance>BinnResources folder.

e. The Distmdl.ldf and the Distmdl.mdf files from the hotfix self-extracting archive into the <Data path for this SQL Server instance>Data folder.

5. Start the Microsoft SQL Server and SQL Server Agent services.

6a. Connect to SQL Server as a member of the system administrator (sa) role or as the sa by using SQL Query Analyzer or the osql utility (osql.exe), and then execute Qfe356326.sql and SecurityHotfix.sql.

6b. If this server is used with replication and if you have distribution databases, connect as a member of the system administrator (sa) role or as the sa by using SQL Query Analyzer or the osql utility (osql.exe), and then switch into the context of each distribution database in turn, executing qfe360814_dist.sql.

7. Run the Servpriv.exe tool from the command prompt. When you run Servpriv.exe, specify a SQL Server 2000 instance to set the appropriate privileges on the corresponding service registry keys. For more information about Servpriv.exe, see the "Information About Servpriv.exe" section, located at the end of this file.

Now wasn't that simple and easy? And as an added bonus you get to do this once for each SQL server you currently have (Typically Primary and Backup servers for production, customer demo(beta test) server, Test (alpha test) server, development server and marketing database server).