Microsoft has released security updates for SQL Server 2000 Service Pack 1 and 2

This article discusses a security or privacy issue that may affect the operation of your computer. The information in this article is provided as-is without warranty of any kind. The workaround or hotfix that is described in this article addresses the issue as it is currently understood, but may not protect against any undiscovered variants of this issue. Microsoft recommends that you apply this patch to computers only after you evaluate the risk that this issue may pose to your computers. In all other cases, Microsoft recommends that you wait for the next service pack for the affected product.

Download for Service Pack 1
Download for Service Pack 2