MS03-031: SQL Server 2000 ?????? ??? 3 ?? ??? ??????? ???

???? ?????? ???? ??????
???? ID: 821277 - ?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
??? ?? ??????? ???? | ??? ?? ??????? ????

?? ????? ??

??????

Microsoft SQL Server 2000 downloadable ?? ????? ?? ??? ??? ??????? ?? ??? ???? ?????? ???? ??? ??????? ??????? ????? ???? ???, ??????? ?? ?? ?????? ??? ??? ?????????? ?? ?? ??? ??????? ??????? ????? SQL Server 2000 ??????? ?? ??? ????? ?? ?? ??? ???? ??? ?? ?????? ?? ??????? ???? ?? ???? ????? ??????? ??? ???? ?? ??????? ???? ?? ??? ???? ???

Microsoft SQL Server 2000 ?? ??? ?????? ?????? ??? ?? ???? ??? ???????? ??????? ?? ??? Microsoft ???????? ??? ???? ????? ?? ??? ????? ???? ?????? ?? ????? ????:
290211?????? SQL Server 2000 ?????? ??? ?? ??????? ???? ?? ??? ???? ????

?????

?? Microsoft ???????? ???? ?? ??? ??????? ??????? SQL Server 2000 ?????? ??? 3 (SP3), SQL Server 2000 ?????? ??? 3a ?? ??? ?????? ?? ???? ??? ??? (SP3a), SQL Server 2000 ???????? ????? (MSDE) ?????? ??? 3 (SP3), ?? SQL Server 2000 ???????? ????? (MSDE) ?????? ??? 3a (SP3a)?

?????????? ???

  • ?? ????? ????? Microsoft ???? ?????? ????? (MDAC) ?? ???????? ???? ??? ??? ??? ?? ??????? ??????? ??? ???? ???

???? ???????????? ?? ?? ??????? ??? ?????? ??????? ?? ?? ???? ??:
  • ????? ???? Hijacking
    SQL ????? ??????? ???? ??, ?? ??? ????? ?? ?? ?? ????? ?? ??? ??? ??????? ?? ??? ????? ??????? ????? ???? ??? ?? ???????? ????, ???? ????? ??? ?? ???????? one-way ?? two-way ???? ???? ????? ?? ?? ?? ???? ???? ??????? ?? ??? ????? ?? ??? ??? SQL ????? ???? ??????? ?? ???? ??? ??? ?? ???? ?? ??? ????? ?? ???????? ???? ?? ??????? ???????? ?? ????? ?? ??? SQL ????? ?? ??? ?? ?? ?????? ?? ???? ???? ?? ??? ????? ???? ?? ???? ???? ???

    ??????? ?????? hijack ???? ?? ??? SQL ????? ?? ??? ?? ?? ???? ?????? ?? ?????? ??? ???? ?? ?? ????? ???? ?? ??? checking ?????? ??? ?? ??? ????? ?? (?? ???????? ???????) ????? ???? ?? ??????? ?? ???? ????? ???? ?? ??? ?? ?????? ??? ?? ??????? ?? ????? ???? ??? ?? ???? ?? ?????? ?????????? ?? ??? ??? ?? ?? ?????? ???? ?? ????? ???? ?? ???????? ??????? ???? ?? ??? ?????? ??? ?????? ???? ?? ?????? ?? ??? ??? ??? ?????????? ?? ?????? ??? ?? ?????? ???? ?? ?????? ?? ??? ??, ???? ???? ???? ?? ????????? ?? ?????? ???? ??, ?????? ????? ???? ?? ?????? ?? ????? ???? compromised ???
  • ???? ?? ???? ????? ?? ???
    ?? ?? ????? ?????? ???????? ??? ?? ?? ???? ?? "????? ???? Hijacking" ??? ??? ????? ??? ??, ??????? ????????? ?? ?? ?? ???? ??????? ?????????? ?? ???? ???? ????? ?? ????? ???? ??? ??? ??? ??????? ????? ???? ?????? SQL ????? ?? ??? ?? ?? ?? ?????????? ???? ??? ????? ?? ???? ???

    ?? ???????????? ?? ?????? arbitrary ??? ?? ????? ?? ???? ????????? elevate ???? ?? ?????? ???? ???? ??; ???????, ???? ?? ?????? ?? ??? ????? ??? ?? ????? ?? ???? ?? ??????????? ?? ???????????? ???? ?? ??? ????? ?? ???????? ???? ?????? ???
  • SQL ????? ???? ?????
    ???? ??????? Windows ????? ?? ?? ?????? ?? ?? specially crafted ????? ????? ?? ?????? SQL ????? ?? ??? ?? ??? ?? ???? ?? ??? ???? ????? ?? ?? ?????? ?????????? ?? ?????? ??? ???? ?? ??? ?? ??? ????? ?? ?? when ???? ??????? ??????? ????????? ??? ???? ?? ???, ?????? ?? (LPC) ????? ?? ?? ???? ????? ???? ?? ???? ???? ??? ??????????? exploited, ?? ?? ???? ??? ???? SQL ????? ???? ???? ?? ???? ?? ???? ?? ??? ???? ????????? elevate ???? ?? ??? ?????? ?? ????????? ????? ?????????? ?? ?????? ??? ?? arbitrary ??? ?? ????? ?? ??? ?? ?????

SQL ????? ???? ??????? ?? ??? MS03 031 ?? ??????? ???? ?? ???: SQL ????? ?? ??? ????? ??????? ???

??????? ???? ?? ??? "MS03 031: ????? ??????? ??? ?? ??? SQL ?????", ?? ???? ???????? ???? ???? SQL Server ????? ???? ?? ??? ?????????? ??????? ?? ????? ??, SQL Server ????, ??????? ?? ??? ?? ??? ?? ??????? ????????? ???? ???? ??? ?? ??????? ????????? ???? ??? ??, ?? ?? ????? ????? ???, ????? ????? ?? ????????? ?? ???? ??????????? ??? ???? ?? ????? ?? ???? ?? ?? ?????? ?? ????, ?? ??? ??????? ???? ?? ????? Microsoft ???????? ???? ??? ?? ????? ?? ????? ????:
826161FIX: ???? ????? ???? ??????? ?? ?????? ???? ?? ??? ??? ???? SQL Server ????? ?? ????? ?? ???

???? ???????

?????????? ???

?????????? ??? ?? SQL Server 2000 SP3 ??? ??? ???????? ?? ?? ??? ?? ??????? ?? ???? ??? ?????

????????? ?????, ???, ?? ??????? (UDDI) ??????

?? ??????? ??? Microsoft Windows Server 2003 ??? ??? ???????? ?? ??????? ????, ?? UDDI ?????? ??????? ??, ??? ?? UDDI ??????, ???? ???????????? ?? ???? ?? ?? ???????? ???? ?? ??? ?? ???????? ??? ?? ?? ?? ???? ????? UDDI ???? ??????? ????? ???? ??? ?? ?? ???? ???? ?????
  • ??? ??? ???? ??? ???? Windows Server 2003 ??? ??? ???????? ?? ????? ??? ??, ?? ???? Microsoft ??????? ?????????? ???????? (IIS) ???????? ???? UDDI ???? ???????? ?? ???? ???? Restarting IIS is the same as first stopping IIS, and then starting it again, except it is done with a single command. There are two ways to restart IIS:
    • Use the IIS Manager graphical user interface.
    • Use the IISReset command-line utility.
  • If other Web services are in use on the computer that is running Windows Server 2003, you may not want to affect their operation. To restart the UDDI Services, follow these steps:
    1. Start the IIS Manager utility.
    2. ??????Application Poolsfolder, and then right-click theMSUDDIAppPool??????
    3. ?? ??? ???? ?? ??? ????? ????Recyclemenu option. Doing so will allow UDDI Services to resume operation without affecting any other Web service on the computer.

An error message occurs when you connect to a Microsoft Windows NT 4.0-based computer by using named pipes

When you connect to a Windows NT 4.0-based computer that is running Microsoft SQL Server 2000 by using named pipes, and that connection is made by a non-admin user, you may receive an error message similar to one of the following:

????? 1
Connection could not be established. SQL Server does not exist
????? 2
Connection could not be established. Access is denied.
To obtain a hotfix to resolve this error message, see the following article in the Microsoft Knowledge Base:
823492"Connection could not be established" error message when you connect to a Windows NT 4.0-based computer that is running SQL Server 2000 or SQL Server 7.0

??????? ???????

????? ????? Microsoft ??????? ?????? ?? ??????? ?? ??? ?????? ??::

http://www.microsoft.com/downloads/details.aspx?FamilyId=9814AE9D-BD44-40C5-ADD3-B8C99618E68D

Release Date: 23 July 2003

Microsoft ?????? ??????? ?? ???? ??????? ???? ?? ???? ??? ???? ????? ?? ???, ????? ???? ?????? ?? ????? ?? ???? ?? Microsoft ???????? ??? ?????::
119591?????? ?????? ?? Microsoft ?????? ??????? ???? ??????? ????
Microsoft ????? ?? ??? ?? ????? ?? ????? ?? ??? Microsoft ?? ?? ?????? ?? ?????? ???? ??????? ?????-??? ?????????? ?? ????? ???? ?? ????? ????? ?? ?? ??.. ????? ?? ?? ???????-??????????? ????? ?? ???????? ???? ??? ?? ?? ????? ??? ???? ?? ??????? ???????? ?? ????? ??? ??? ???? ??..

??????????????

This security patch requires SQL Server 2000 Service Pack 3 (SP3) or Service Pack 3a (SP3a). Microsoft recommends SQL Server 2000 Service Pack 3a.

???????? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
290211?????? SQL Server 2000 ?????? ??? ?? ??????? ???? ?? ??? ???? ????
???:If you have not installed the security patch for Microsoft Security Bulletin MS03-031, download and use the file that is available in the following Microsoft Knowledge Base article:
826161FIX: You are prompted for password confirmation after you change a standard SQL Server login

??????? ???????

This security patch supports the following Setup switches.
?? ?????? ?? ??????? ?????? ?????? ?? ??????? ????
??????????:
sDisables theSelf Extractionprogress dialog box. Must come before the/a?????.
/aThis parameter must come before all parameters except/s??? ?? ???????? self-extracting EXE ?? ????? ?? ??? ??? ???, ?? ????????? ??????? ?? ??? ???????? ????? ???? ????? ???? ?? ???????? ????????? ??? ??? ????? ?? ??? ??????? ?? ??? ???????? ???
/q?? ????? ?? ???? ????? ????????? ?? ??? ?????????? ???????? ?? ??? ??: ???? ??? ??? ????? ?? ??? ???
INSTANCENAMESQL ????? ?? ?????? ?? ??? ??? ???? ???? ???? ???? ?? ?? ??? ???:

INSTANCENAME =yourinstancename
BLANKSAPWD?? ???? ?? ?? ?????SASQL ??????? ?? ??? ???????? ??? ?? Microsoft Windows NT ?? Microsoft Windows 2000 ??? ??? ???????? ?? ?? ???????? ???? ????, ???????? Windows ?????????? ????? overridden ?? ?? ?? ????? ?? ??? ??? ?? ???? ?? ?????? ????SA???????? ?? ???????? ?? ??? ??? ?????? ??BLANKSAPWD = 1. ????????? ??????? ?? ??? ???? ?? ???????? ?????? ????
SAPWD???-?????SA???????? ??? ?? ?? ???????? ???? ????, ?? ?? ??? ??? ???? ?????SAPWD =yoursapassword. ?? ???????? ??? ??? ??? Windows NT ?? Windows 2000 ?? BLANKSAPWD, ??? ???? ???? ?? ?? ???????? ?? Windows ?????????? ??????? ??????? ???? ???
???????? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
330391SQL ????? ???????? ???????

???? ??????? ????????

?? ???? ???? ?? ??? ?? ??????? ??? ???????? ??????? ???? ?? ??? ???? ????? ???? ?? ?? ?? ???? ???????? ?? ???????? ???? ?? ??? ???? ???

??????? ?? ???????

?? ?? ?? ??? ?????? ?? ????? ?? ??????? ??? ?? ??????? ???? ?? ???? ??????? ?? ?? ??? ??????? ???? ??? ???? ??????? ?? ???, ????? Microsoft ???????? ???? ??? "???? ?? ??????? ?? ?????? ????????" ??? ?????:
330391SQL ????? ???????? ???????

??????? ??? ??????????? ???????

?? ??????? ??? ?? ???? ?? ???? SQL Server 2000 ?????? ??? 3 (SP3) ??????? ??????? ?? ???????????? ???? ?????

????? ???????

?? ??????? ??? ?? ???????? ??????? ??? ????? ????????? (?? ??? ??? ????? ?????????) ?? ?? ????? ?????? ??? ???????? ???? ?? ??????? ?? ??? ?????? ?? ???, ??????? ????????? ??? (UTC) ??? ???????? ??.. ?? ?? ????? ??????? ????? ???, ?? ?? ??????? ??? ??? ?????? ???? ???? ??.. "UTC ?? ??????? ??? ??? ???? ????? ?? ???, ???????? ??? ??? ""?????? ?? ??? ???"" ??? """"??? ???????"" "??? ?? ????? ????..
   Date         Time   Version             Size         File name
   ----------------------------------------------------------------------------
   31-May-2003  18:45  2000.80.818.0      78,400 bytes  Console.exe      
   25-Jun-2003  01:01  2000.80.818.0      33,340 bytes  Dbmslpcn.dll     
   25-Apr-2003  02:12                    786,432 bytes  Distmdl.ldf
   25-Apr-2003  02:12                  2,359,296 bytes  Distmdl.mdf
   30-Jan-2003  01:55                        180 bytes  Drop_repl_hotfix.sql
   07-Apr-2003  19:15  2000.80.801.0   1,557,052 bytes  Dtsui.dll        
   24-Apr-2003  02:51                    747,927 bytes  Instdist.sql
   03-May-2003  01:56                      1,581 bytes  Inst_repl_hotfix.sql
   08-Feb-2003  06:40  2000.80.765.0      90,692 bytes  Msgprox.dll      
   01-Apr-2003  02:07                      1,873 bytes  Odsole.sql
   07-May-2000  07:04                      1,873 bytes  Odsole.sql     
   02-Apr-2003  21:48  2000.80.796.0      57,904 bytes  Osql.exe         
   02-Apr-2003  23:15  2000.80.797.0     279,104 bytes  Pfutil80.dll     
   04-Apr-2003  21:27                  1,083,467 bytes  Replmerg.sql
   04-Apr-2003  21:53  2000.80.798.0     221,768 bytes  Replprov.dll     
   08-Feb-2003  06:40  2000.80.765.0     307,784 bytes  Replrec.dll      
   05-May-2003  00:05                  1,085,874 bytes  Replsys.sql
   31-May-2003  01:01  2000.80.818.0     492,096 bytes  Semobj.dll       
   31-May-2003  18:27  2000.80.818.0     172,032 bytes  Semobj.rll
   29-May-2003  00:29                    115,944 bytes  Sp3_serv_uni.sql
   01-Jun-2003  01:01  2000.80.818.0   4,215,360 bytes  Sqldmo.dll       
   07-Apr-2003  17:44                     25,172 bytes  Sqldumper.exe    
   19-Mar-2003  18:20  2000.80.789.0      28,672 bytes  Sqlevn70.rll
   24-Apr-2003  05:39  2000.80.811.0     176,696 bytes  Sqlmap70.dll     
   08-Feb-2003  06:40  2000.80.765.0      57,920 bytes  Sqlrepss.dll     
   01-Jun-2003  01:02  2000.80.818.0   7,544,916 bytes  Sqlservr.exe     
   01-Jun-2003  01:02                 12,739,584 bytes  Sqlservr.pdb
   08-Feb-2003  06:40  2000.80.765.0      45,644 bytes  Sqlvdi.dll       
   25-Jun-2003  01:01  2000.80.818.0      33,340 bytes  Ssmslpcn.dll     
   01-Jun-2003  01:01  2000.80.818.0      82,492 bytes  Ssnetlib.dll     
   01-Jun-2003  01:01  2000.80.818.0      25,148 bytes  Ssnmpn70.dll     
   01-Jun-2003  01:01  2000.80.818.0     158,240 bytes  Svrnetcn.dll     
   31-May-2003  18:59  2000.80.818.0      76,416 bytes  Svrnetcn.exe     
   30-Apr-2003  23:52  2000.80.816.0      45,132 bytes  Ums.dll          
   30-Apr-2003  23:52                    132,096 bytes  Ums.pdb
   28-Feb-2003  01:34  2000.80.778.0      98,872 bytes  Xpweb70.dll

?????????

????????? SQL ????? ?? ????? ??????? ?? ??? ??? ???, ?? ??? ????? Microsoft ???????? ???? ???? ??? ??????? ?? ????? ????:
321185SQL ????? ???? ??? ??????? ?? ??????? ?? ????? ???? ????
?? ??????? ??? ???? ???? ?? ??? ????? ??? ?? ?? ?????:
SELECT serverproperty('productversion') 

SELECT @@Version
????? ????? ???? ??:
8.00.818

??????

?? ??????? ??? ?? ???? ??? ???????? ??????? ?? ??? ????? Microsoft ??????? ??????? ?????:
HTTP://www.Microsoft.com/technet/Security/bulletin/MS03-031.mspx
???????? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
824684Microsoft ?????????? ???????? ?? ????? ???? ?? ??? ????? ?? ???? ???? ???? ???????? ?? ?????

???

???? ID: 821277 - ????? ???????: 05 ?????? 2010 - ??????: 2.0
???? ???? ???? ??:
  • Microsoft SQL Server 2000 Service Pack 3
??????: 
atdownload kbsqlserv2000presp4fix kbqfe kbfix kbmt KB821277 KbMthi
???? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:821277

??????????? ???

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com