I have been posting these reports on MSSQL over 3 years now and they keep coming [:)]

Microsoft is beating Oracle hands down with the security of its database, according to a new report.

David Litchfield, a security researcher with NGS Software, published a whitepaper entitled Which database is more secure? Oracle vs. Microsoft (PDF download) on 21 November comparing the number of software vulnerabilities patched by both vendors in their respective products in the past six years.

Microsoft patched 59 vulnerabilities in its SQL Server 7, 2000 and 2005 databases during the period, while Oracle issued 233 patches for software flaws in its Oracle 8, 9 and 10g databases.

The research also pointed out that Microsoft has not issued a single security bulletin for its databases since mid-2003, whereas Oracle has seen a spike in patches in recent years.

Litchfield ranked Microsoft SQL Server 2000 service pack 4 as the most secure database in the market, together with the PostgreSQL open source project. He ranked Oracle's 10g database at the bottom.

"It will take me five minutes to find a new bug in the Oracle 10g database, but I cannot do that with SQL Server 2005," Litchfield told vnunet.com in an interview.

Send via e-mail | Submit to Digg | Add to Live Favorites