• info
• discussion
• exploit
• solution
• references

Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability

Solution:
Fixes available:


Microsoft SQL Server 2000

• Microsoft sql2ksp3
  http://www.microsoft.com/sql/downloads/2000/sp3.asp?SD=GN&LN=en-us&gss nb=1

Microsoft SQL Server 2000 SP1

• Microsoft sql2ksp3
  http://www.microsoft.com/sql/downloads/2000/sp3.asp?SD=GN&LN=en-us&gss nb=1

Microsoft SQL Server 2000 Desktop Engine

• Microsoft sql2ksp3
  http://www.microsoft.com/sql/downloads/2000/sp3.asp?SD=GN&LN=en-us&gss nb=1

Microsoft SQL Server 2000 SP2

• Microsoft Q316333
  http://support.microsoft.com/default.aspx?scid=http://download.microso ft.com/download/SQLSVR2000/Update/8.00.0650/W98NT42KMeXP/EN-US/8.00.06 50_enu.exe


• Microsoft sql2ksp3
  http://www.microsoft.com/sql/downloads/2000/sp3.asp?SD=GN&LN=en-us&gss nb=1