Re: how bad are these vulnerabilities?

DA Morgan wrote:
> Well while they are doing that ... perhaps they can explain to your
> legal department how they plan to handle SQL Server's inability to meet
> SarbOx requirements?

Only do that if you want to look rather silly. Legislation does not prohibit particular platforms, just mandates approaches and controls. You can do this with all the leading databases on the market today.

-- 
Niall Litchfield
Oracle DBA
http://www.orawin.info/services