Security Update for SQL Server 2000 Service Pack 4 and MS Access MSDE 2000 (KB948111)

A security issue has been identified in the SQL Server 2000 Service Pack 4 and the MSDE 2000 sql server engine used by MS Access that could allow an attacker to compromise your system and gain control over it. Download the hot fix.

Quick Details:
Version: 8.00.2273
Date Published: 9/26/2008
Download Size: 16.5 MB - 39.4 MB Download size depends on selected download components.

Security Update for SQL Server 2000 SP4 and MSDE 2000

Microsoft today issued a security hotfix for SQL Server 2000 and the Access MSDE engine:

Version:	8.00.2050
Date Published:	7/29/2008
Language:	English
Download Size:	10.3 MB - 29.6 MB*

Security Fix for SQL Server and MSDE Released

Microsoft today released
Security Bulletin MS08-040 – Important Vulnerabilities in Microsoft SQL Server Could Allow Elevation of Privilege (941203):

This security update resolves four privately disclosed vulnerabilities. The more serious of the vulnerabilities could allow an attacker to run code and to take complete control of an affected system. An authenticated attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

This security update is rated Important for supported releases of SQL Server 7.0, SQL Server 2000, SQL Server 2005, Microsoft Data Engine (MSDE) 1.0, Microsoft SQL Server 2000 Desktop Engine (MSDE 2000), Microsoft SQL Server 2005 Express Edition, Microsoft SQL Server 2000 Desktop Engine (WMSDE), and Windows Internal Database (WYukon). For more information, see the subsection, Affected and Non-Affected Software, in this section.

The security update addresses the vulnerabilities by modifying the way that SQL Server manages page reuse, allocating more memory for the convert function, validating on-disk files before loading them, and validating insert statements. For more information about the vulnerabilities, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under the next section, Vulnerability Information.

Recommendation. Microsoft recommends that customers apply the update at the earliest opportunity.