SQL Server 2005 - 1 Year And Not Yet Counting...

posted by  techgeek (12)  12 months ago (blogs.technet.com)

Vulnerabilities, that is.  It has been about a year now since SQL Server 2005, so I thought this would be a good time to review how it has done security-wise.  The latest SQL Server product from Microsoft has had zero vulnerabilities disclosed or fixed in its first year of availability.

First, I want to applaud the SQL team as one that really embraced the Security Development Lifecycle (SDL), and, as a result, SQL 2005 went through two passes of the SDL.  SQL 2000 SP3 went through a "mini SDL" process (in the sense that there are some portions of the SDL that just can'