受影响系统: Microsoft Data Engine 1.0 - Microsoft Visual Studio 6.0 - Microsoft Windows NT 4.0 - Microsoft Access 2000 + Microsoft Office 2000 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 - Microsoft Windows NT 2000.0 Microsoft SQL Server 7.0 - Microsoft Windows NT 4.0 - Microsoft BackOffice 4.5 - Microsoft Windows NT 4.0 描述: by Microsoft Security Bulletin Microsoft SQL Serve 7.0和Data Engine(数据引擎)接收SQL查询时有可能造成数据库或系统被入侵。任何经过SQL验证的用户都有可能能够通过SQL SELECT命令以数据拥有者或管理员权限执行命令。 建议: Microsoft公司提供以下安全补丁: Microsoft Data Engine 1.0: Microsoft patch s70780a (Alpha Version) http://www.microsoft.com/downloads/release.asp?ReleaseID=19132 Microsoft patch s70780i (Intel Version) http://www.microsoft.com/downloads/release.asp?ReleaseID=19132 Microsoft SQL Server 7.0: Microsoft patch s70780a (Alpha Version) http://www.microsoft.com/downloads/release.asp?ReleaseID=19132 Microsoft patch s70780i (Intel Version) http://www.microsoft.com/downloads/release.asp?ReleaseID=19132
|