Microsoft KB Archive/318268

= INF: SQL Server 7.0 Security Update for Service Pack 3 =

Article ID: 318268

Article Last Modified on 8/10/2004

-

APPLIES TO


 * Microsoft SQL Server 7.0 Service Pack 3

-



This article was previously published under Q318268



This article discusses a security or privacy issue that may affect the operation of your computer. The information in this article is provided &quot;as-is&quot; without warranty of any kind. The workaround or hotfix that is described in this article addresses the issue as it is currently understood, but may not protect against any undiscovered variants of this issue. Microsoft recommends that you apply this cumulative patch or implement the workarounds if one is provided.



SUMMARY
Microsoft distributes SQL Server 7.0 security fixes as one downloadable file. Because the security fixes are cumulative, each new release contains all of the security fixes that were included with the previous SQL Server 7.0 security fix release. You do not have to install the previous patch before you install the latest one. This Microsoft Knowledge Base article contains a list of all the security fixes that are available for SQL Server 7.0 Service Pack 3 (SP3). Before you apply the patch, you must install SQL Server 7.0 Service Pack 3 (SP3).

For additional information about the cumulative security patch for SQL Server 2000, click the article number below to view the article in the Microsoft Knowledge Base:

316333 INF: SQL Server 2000 Security Update for Service Pack 2



April 17, 2002 Release
This release of the SQL Server 7.0 security cumulative package contains the following fix:

319507 SQL Extended Procedure Functions Contain Unchecked Buffers

For more information about this vulnerability, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS02-020.mspx

The following files are available for download from the Microsoft Download Center:

Intel
English: Download 7.00.1030_SQL7_sp3_x86_enu.exe now

French: Download 7.00.1030_SQL7_sp3_x86_frn.exe now

German: Download 7.00.1030_SQL7_sp3_x86_ger.exe now

Japanese: Download 7.00.1030_SQL7_sp3_x86_jpn.exe now

Spanish: Download 7.00.1030_SQL7_sp3_x86_spa.exe now

Alpha
English: Download 7.00.1030_SQL7_sp3_alpha_enu.exe now

Japanese: Download 7.00.1030_SQL7_sp3_alpha_jpn.exe now

Release Date: APR-17-2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

x86
  Date         Time   File Version  Product    Size             File Name Version ---  03-Apr-2002  21:44                           4,362,608 bytes  Sqlservr.dbg 03-Apr-2002 21:44  2000.28.3.0   7.00.1028  5,054,736 bytes  Sqlservr.exe 14-Feb-2002 13:37  2000.26.11.0  7.00.1021    586,000 bytes  Sqlsort.dll 05-Apr-2002 21:04  2000.28.5.0   7.00.1030     53,248 bytes  Xplog70.dll 05-Apr-2002 21:04  2000.28.5.0   7.00.1030     45,056 bytes  Xpsql70.dll 05-Apr-2002 21:04  2000.28.5.0   7.00.1030    196,608 bytes  Xpstar.dll 05-Apr-2002 21:04  2000.28.5.0   7.00.1030    151,552 bytes  Xpweb70.dll

Alpha
 Date        Time   File Version  Product    Size              File Name Version ---  04-Apr-2002  01:45                           13,428,960 bytes  Sqlservr.dbg 04-Apr-2002 01:44  2000.28.3.0   7.00.1028  11,651,344 bytes  Sqlservr.exe 14-Feb-2002 17:37  2000.26.11.0  7.00.1021     593,168 bytes  Sqlsort.dll 06-Apr-2002 01:04  2000.28.5.0   7.00.1030      38,400 bytes  Xplog70.dll 06-Apr-2002 01:04  2000.28.5.0   7.00.1030      35,840 bytes  Xpsql70.dll 06-Apr-2002 01:04  2000.28.5.0   7.00.1030     210,944 bytes  Xpstar.dll 06-Apr-2002 01:04  2000.28.5.0   7.00.1030     226,816 bytes  Xpweb70.dll

February 20, 2002 Release
This release of the SQL Server 7.0 security cumulative package contains the following fix:

317979 FIX: Unchecked Buffer May Occur When You Connect to Remote Data Source

For more information about this vulnerability, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS02-007.mspx

If you have already applied this security update to a non-English version of SQL Server between February 20, 2002 and February 23, 2002, you must download the corresponding localized package and update the Xpstar.dll file as described in the Readme.txt file that is included in the package.

The following files are available for download from the Microsoft Download Center:

Intel
English: Download S71021i.exe now

French: Download S71021i_frn.exe now

German: Download S71021i_ger.exe now

Japanese: Download S71021i_jpn.exe now

Spanish: Download S71021i_esn.exe now

Alpha
English: Download S71021a.exe now

Japanese: Download S71021a_jpn.exe now

Release Date: FEB-20-2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

x86
  Date         Time   File Version  Product    Size             File Name Version ---  18-Feb-2002  20:18                           4,362,272 bytes  Sqlservr.dbg 18-Feb-2002 20:19  2000.26.18.0  7.00.1021  5,054,736 bytes  Sqlservr.exe 14-Feb-2002 13:37  2000.26.11.0  7.00.1021    586,000 bytes  Sqlsort.dll 13-Feb-2002 00:45  2000.26.11.0  7.00.1021    196,608 bytes  Xpstar.dll

Alpha
  Date         Time   File Version  Product    Size              File Name Version -  18-Feb-2002  20:18                           13,434,824 bytes  Sqlservr.dbg 18-Feb-2002 20:19  2000.26.18.0  7.00.1021  11,657,488 bytes  Sqlservr.exe 14-Feb-2002 13:37  2000.26.11.0  7.00.1021     593,168 bytes  Sqlsort.dll 13-Feb-2002 00:45  2000.26.11.0  7.00.1021     210,432 bytes  Xpstar.dll

Fixes Released on January 24, 2002
This release of the SQL Server 7.0 security cumulate package contains the following fix:

304851 FIX: SQL Server Text Formatting Functions Contain Unchecked Buffers

For more information about this vulnerability, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS01-060.mspx

The following files are available for download from the Microsoft Download Center:

Intel
Download S71020i.exe now

Alpha
Download S71020a.exe now

Release Date: JAN-24-2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

x86
  Date        Time    File Version Product     Size             File Name Version -  17-Apr-2002  12:34                           5,341,528 bytes  S71020i.exe 21-Jan-2002 04:07                           4,359,192 bytes  Sqlservr.dbg 21-Jan-2002 04:06  2002.1.20.0   7.00.1020  5,054,736 bytes  Sqlservr.exe 14-Jan-2001 04:39  2001.1.13.0   7.00.978     586,000 bytes  Sqlsort.dll

Alpha
  Date         Time   File Version  Product    Size              File Name Version 17-Apr-2002 12:39                           10,564,440 bytes  S71020a.exe 21-Jan-2002 04:07                           13,523,808 bytes  Sqlservr.dbg 21-Jan-2002 04:07  2002.1.20.0   7.00.1020  11,706,128 bytes  Sqlservr.exe 14-Jan-2001 04:39  2001.1.13.0   7.00.978      593,168 bytes  Sqlsort.dll

Comments about this or other Microsoft Knowledgbase articles? Drop us a note at [mailto:sqlkb@microsoft.com SQLKB@Microsoft.com]

Additional query words: security_patch

Keywords: kbdownload kbbug kbfix kbsqlserv700presp4fix kbqfe kbsecurity atdownload KB318268

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.