Microsoft has released a patch that eliminates a security vulnerability in a component that ships with Microsoft(r) SQL Server
7.0. If the component is configured improperly, the vulnerability
could allow passwords to be compromised.

Frequently asked questions regarding this vulnerability and the patch
can be found at http://www.microsoft.com/technet/security/bulletin/fq00-041.asp

Download