Re: Schadenssummen durch Malware?

Chris Haaser wrote:
* quoting Sebastian Gottschalk:

[MSDE]

Was mir vollkommen schleierhaft, warum man da überhaupt einen
abgespeckten MSSQL Server ausliefern muss, wenn fast alle Anwendungen,
für die man es benötigt, auch mit dem ODBC-Treiber MSSQL+SQLXML-Engine
laufen würden.

Nein. SQLXML ist eine Schnittstelle, um per XML auf den SQL-Server
zugreifen zu können. Nicht per SQL auf XML-Dateien.

s/Nein/Ja/

SQLXML setzt XML ja nicht in SQL, sondern in die DML der MSSQL-Datenbank um.
.

Relevant Pages

  • wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting
    ... Westpoint Security Advisory ... SQLXML allows XML data to be transferred to and from SQL Server, ... SQlXML has two vulnerabilities: a buffer overflow in the SQLXML ISAPI ...
    (Bugtraq)
  • Re: Annotated schema with views?
    ... There are no plans for using FOR XML PATH for SQL 2005. ... In Sql 2005, there are no changes in the way SQLXML generate queries. ... For the complexity brought by the elements, if you use simple type elements ...
    (microsoft.public.sqlserver.xml)
  • Re: SQLOLEDB vs. MSDASQL
    ... > with SQLXML. ... SQL syntax should not be an issue. ... Of course, even if the difference is subtle, it may still be important. ... Since you mention XML, there is one case where there is an important ...
    (microsoft.public.data.oledb)
  • Re: Limitations of OPENXML support in SQL Server
    ... > Check out if SQLXML can help you out. ... SQLXML moves the XML management out ... > SQL Server and helps you write the same in the application layer. ... >> programming solutions, but not using XML as a data source. ...
    (microsoft.public.sqlserver.xml)
  • Re: Is there a way to convert ms sql 2008 tables to XML files?
    ... After looking at the code I made it work, since I removed 2 nVARCHARcolumns from the SQL statement where it is used as an RTF. ... I have the 2 XML files the bad and the good which are below: ... Verdana;}{\f1\fnil\fcharset0 Microsoft Sans ... Here is the actual string copied from the ms sql 2008 which works fine; ...
    (microsoft.public.dotnet.framework.aspnet)
Loading