FIX: Potential English Query Security Issue

View products that this article applies to.

This article was previously published under Q297105

BUG #: 101596 (SQLBUG_70)
BUG #: 353115 (SHILOH)

SYMPTOMS

If you are running Microsoft SQL Server English Query applications or Model testing English Query applications with Microsoft Visual Studio, you should apply the English Query update to ensure the most robust English Query server configuration.

Back to the top

RESOLUTION

SQL Server 7.0

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 (http://support.microsoft.com/kb/119591/EN-US/ ) How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
SQL Server 2000
A supported fix is now available from Microsoft, but it is only intended to correct the problem described in this article and should be applied to all Microsoft SQL Server English Query applications.

To resolve this problem immediately, the following file is available for download from the Microsoft Download Center:

Collapse this imageExpand this image

Download SQL Server 2000 patch (s80286i.exe) now (http://download.microsoft.com/download/sqlsvr2000/patch/s80286i/win98/en-us/s80286i.exe)

The s80286i.exe file contains the following files:

File name      Size        Date
-------------------------------------

Mseqbase.dll   6,385,718   4/23/2001
Mseqcore.eqd   1,182,720   4/23/2001
Readme.txt     2,160       4/25/2001

Release Date: MAY-6-2001

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 (http://support.microsoft.com/kb/119591/EN-US/ ) How To Obtain Microsoft Support Files from Online Services

Back to the top

Steps to Install the Fix

To install the fix, use these steps:

Download the appropriate Microsoft English Query patch (s70992i.exe for SQL Server 7.0 and s80286i.exe for SQL Server 2000) by clicking the link to the file shown in the "Resolution" section.
Extract the patch in the downloaded file by running the self-extracting executable file.
Follow the instructions in the Readme.txt file that is included with the downloaded file.

Back to the top