MS-SQL Server vulnerability

Microsoft issued a pre-patch advisory confirming a remote execution vulnerability affecting its SQL Server line.
Also warned network and web administrator on 22nd-Dec-2008 about SQL Server vulnerability.

The vulnerability affects the following products.
Microsoft SQL Server 2000
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition
Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
Microsoft SQL Server 2000 Desktop Engine (WMSDE),
Windows Internal Database

The company's latest version its database software --including Microsoft SQL Server 7.0 Service Pack 4, MS-SQL Server 2005 Service Pack 3, and MS-SQL Server 2008 are not affected by the vulnerability.

Online criminals have increasingly targeted legitimate Web sites as a way to host and spread malicious code.
In the past two weeks, thousands of Web sites have been hacked to host an attack taking advantage of a serious flaw in IE that Microsoft only recently patched.