RE: DB2 has fairly large # of vulnerabilities in latest SQL 2014 brochure

Where are you seeing "comprised mostly of tests microsoft submits" ?

I looked at a bunch of db2 ones and nothing says "microsoft" on them.


-----Original Message-----
From: Dan Kimmel [mailto:dkimmel@xxxxxxxxxxxxxxx]
Sent: Tuesday, August 06, 2013 9:26 AM
To: Midrange Systems Technical Discussion
Subject: RE: DB2 has fairly large # of vulnerabilities in latest SQL 2014 brochure

http://nvd.nist.gov/

Looks like the vulnerability database is comprised mostly of tests Microsoft submits, so it would make sense their database excels. Microsoft NEEDS to do this more than the other makers as SQL Server has long been perceived as the most vulnerable and most fragile.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
bounces@xxxxxxxxxxxx] On Behalf Of Matt Olson
Sent: Tuesday, August 06, 2013 9:07 AM
To: midrange-l@xxxxxxxxxxxx
Subject: DB2 has fairly large # of vulnerabilities in latest SQL 2014
brochure

I was looking at the datasheet for SQL 2014 that will be coming out
within the next year or so. What I found interesting is they ranked
the major databases by vulnerabilities over a 5 year period.
Microsoft SQL was #1 with the fewest vulnerabilities, Oracle and DB2 had by far the most vulnerabilities discovered.

http://download.microsoft.com/download/D/7/D/D7D64E12-C8E5-4A8C-
A104-C945C188FA99/SQL_Server_2014_Datasheet.pdf

I'm curious though, I can't seem to find their source of this
information on the NIST vulnerability database to corroborate this news.

I'm suspecting that most of this is from DB2 on LUW and not the DB2
for i variety as the LUW version is a bit more mainstream.

Thoughts?

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.