Microsoft KB Archive/297105

= FIX: Potential English Query Security Issue =

Article ID: 297105

Article Last Modified on 10/26/2007

-

APPLIES TO


 * Microsoft SQL Server 2000 Standard Edition
 * Microsoft SQL Server 7.0 Standard Edition

-



This article was previously published under Q297105



BUG #: 101596 (SQLBUG_70)

BUG #: 353115 (SHILOH)



SYMPTOMS
If you are running Microsoft SQL Server English Query applications or Model testing English Query applications with Microsoft Visual Studio, you should apply the English Query update to ensure the most robust English Query server configuration.



SQL Server 7.0
A supported fix is now available from Microsoft, but it is only intended to correct the problem described in this article and should be applied to all Microsoft SQL Server English Query applications.

To resolve this problem immediately, the following file is available for download from the Microsoft Download Center:

Download SQL Server 7.0 patch (s70992i.exe) now

The s70992i.exe file contains the following files: File name     Size        Date - Mseqbase.dll  6,028,560   4/27/2001 Mseqcore.eqd  1,190,912   4/27/2001 Readme.txt    1,968       5/1/2001 Release Date: MAY-06-2001

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

SQL Server 2000
A supported fix is now available from Microsoft, but it is only intended to correct the problem described in this article and should be applied to all Microsoft SQL Server English Query applications.

To resolve this problem immediately, the following file is available for download from the Microsoft Download Center:

Download SQL Server 2000 patch (s80286i.exe) now

The s80286i.exe file contains the following files: File name     Size        Date -

Mseqbase.dll  6,385,718   4/23/2001 Mseqcore.eqd  1,182,720   4/23/2001 Readme.txt    2,160       4/25/2001 Release Date: MAY-6-2001

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.



WORKAROUND
All customers that use Microsoft SQL Server English Query applications should download and apply the fix that is appropriate for their version of Microsoft SQL Server.



STATUS
Microsoft has confirmed this to be a problem in SQL Server 7.0 and SQL Server 2000.



Steps to Install the Fix
To install the fix, use these steps:
 * 1) Download the appropriate Microsoft English Query patch (s70992i.exe for SQL Server 7.0 and s80286i.exe for SQL Server 2000) by clicking the link to the file shown in the &quot;Resolution&quot; section.
 * 2) Extract the patch in the downloaded file by running the self-extracting executable file.
 * 3) Follow the instructions in the Readme.txt file that is included with the downloaded file.

Keywords: kbproductlink kbdownload kbdownload kbbug kbfile kbfix kbgraphxlinkcritical kbqfe KB297105

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.