MS08-040: Description of the security update for SQL Server 2000 GDR and MSDE 2000: July 8, 2008

Article translations Article translations
Article ID: 948110 - View products that this article applies to.
Expand all | Collapse all

On This Page

INTRODUCTION

Microsoft has released security bulletin MS08-040. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Known issues with this security update

  • If the WMSDE database is larger than 2 gigabytes (GB), you must perform the following step to successfully update WMSDE with this security update:
    • For supported 32-bit editions of the WSS (SharePoint) instances of SQL Server 2000 Desktop Engine (WMSDE), follow these steps:
      1. Download this security update by using one of the links in the "Introduction" section.
      2. Install this security update.
      3. Click Start, click Run, type cmd in the Open box, and then click OK.
      4. At the command prompt, type the following command and then press ENTER:
        SQLWMSDE-KB948110-x86-ENU /quiet /upgradesp sqlrun DISABLENETWORKPROTOCOLS=1 DISABLEAGENTSTARTUP=1 DISABLETHROTTLE=1 BLANKSAPWD=1 INSTANCENAME=Sharepoint REINSTALL=ALL REINSTALLMODE=VEMUS /l*v %windir%WMSDE.log
    • For supported 32-bit editions of the WSUS instances of SQL Server 2000 Desktop Engine (WMSDE), follow these steps:
      1. Download this security update by using one of the links in the "Introduction" section.
      2. Install this security update.
      3. Click Start, click Run, type cmd in the Open box, and then click OK.
      4. At the command prompt, type the following command and then press ENTER:
        SQLWMSDE-KB948110-x86-ENU /quiet /upgradesp sqlrun DISABLENETWORKPROTOCOLS=1 DISABLEAGENTSTARTUP=1 DISABLETHROTTLE=1 BLANKSAPWD=1 INSTANCENAME=WSUS REINSTALL=ALL REINSTALLMODE=VEMUS /l*v %windir%WMSDE.log
  • When you use the Add or Remove Programs item in Control Panel to uninstall this security update, the SQL Server 2000 Desktop Engine (WMSDE) is also removed.
  • SharePoint users who upgraded from SQL Server 2000 Desktop Engine (WMSDE) to any other edition of SQL Server 2000 (for example, SQL Server 2000 Standard Edition) may be incorrectly offered a WMSDE update for this security release. This problem can occur if the SQL Server 2000 edition is not patched correctly with SQL Server 2000 Service Pack 4 after the upgrade from WMSDE. The WMSDE update may cause SharePoint to stop working. To resolve this problem if this occurs, follow these steps to restore SharePoint functionality:
    1. Perform the upgrade to SQL Server 2000 again.

      Note You must use the same media that was previously used to perform the upgrade to SQL Server 2000.
    2. Restart the server instance. The server instance should start as the upgraded version.
    3. Apply SQL Server 2000 Service Pack 4.

      Note Make sure that you apply the SQL Server 2000 Service Pack 4 and not the MSDE SP4 or WMSDE SP4 updates.

      For more information about how to obtain SQL Server 2000 Service Pack 4, visit the following Microsoft Web page:
      http://www.microsoft.com/downloads/details.aspx?FamilyID=8e2dfc8d-c20e-4446-99a9-b7f0213f8bc5&displaylang=en
    4. Manually apply sp4_serv_uni.sql from the Install folder. To do this, type the following command at a command prompt:
      osql -n -b -d master -Slpc:%computername%\SHAREPOINT -i "%programfiles%\Microsoft SQL Server\MSSQL$SHAREPOINT\Install\sp4_serv_uni.sql" -o "%programfiles%\Microsoft SQL Server\MSSQL$SHAREPOINT\Install\sp4_serv_uni.out" -E


      Note These steps assume that the WMSDE installation folder is in the default location. If you are using a custom installation, you must adjust the path accordingly in the command.
  • Microsoft Internet Security and Acceleration (ISA) Server 2004 and ISA Server 2006 could be affected by this update in the following ways:
    • The MSSQL$MSFW service is stopped and then restarted when the associated database instances are updated. This action occurs if Microsoft SQL Server 2000 or Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) is installed on the computer that is running ISA Server. This action also stops the Microsoft Firewall service. Therefore, the SQL Server installer tries to return the Microsoft Firewall service to the same state that it was in before the update was started. Because the update installer cannot control services on a remote server, you must monitor and possibly restart the Microsoft Firewall service and the dependent services if ISA Server is configured for remote SQL Server logging.

      By default, ISA Server disables remote network connectivity for the ISA Server MSDE instance (MSSQL$MSFW) to prevent vulnerability to network-based SQL attacks. ISA Server 2004 Setup installs a pre-SQL Server 2000 Service Pack 4 (SP4) version of MSDE 2000 that you must upgrade to SQL Server 2000 SP4 before you apply this update. For more information about how to obtain SQL Server 2000 SP4, visit the following Microsoft Web site:
      http://www.microsoft.com/downloads/details.aspx?FamilyID=8e2dfc8d-c20e-4446-99a9-b7f0213f8bc5
      The MSDE 2000 component of SQL Server 2000 SP4 is named the SQL2000.MSDE-KB884525-SP4-x86-Lang.exe file. Type the following command at a command prompt to upgrade the instance of ISA Server 2004 MSDE to MSDE 2000 together with SQL Server 2000 SP4:
      setup /upgradesp sqlrun instancename=MSFW /l*v c:\msde2Ksp4.log
      Important The SQL Server 2000 SP4 installer also stops and then tries to restart the Microsoft Firewall service. However, the service may not correctly restart after you install the security update. In this case, you may have to restart the service manually.
    • ISA Server 2006 installs MSDE 2000 together with SQL Server 2000 SP4.

      By default, ISA Server 2000 is not affected by the SQL Server security update. ISA Server 2000 may be configured to use a remote instance of SQL Server for logging. If that instance of SQL Server is updated, ISA Server 2000 may be affected in the same manner as ISA Server 2004 and ISA Server 2006. Because the update installer cannot control services on a remote server, you must monitor and possibly restart the ISA Server services.

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported 32-bit editions of SQL Server 2000 SP4

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Updatelauncher.exe5.2.3790.12888,70425-May-200821:45x86
Spupdsvc.exe6.2.29.025,82426-Dec-200702:26x64
Osql.exe2000.80.2050.057,34425-May-200821:44x86
Replmerg.exe2000.80.2050.0163,84025-May-200821:44x86
Replrec.dll2000.80.2050.0315,39225-May-200821:44x86
Sqlservr.exe2000.80.2050.09,154,56025-May-200821:44x86
Osql.exe2000.80.2039.057,34425-May-200821:45x86
Sqlbootldr.exe1.4.1535.032,76825-May-200821:45x86
Sqlstpcustomdll.dll1.4.1535.03,336,19222-May-200821:57x64
Spupdsvc.exe6.2.29.022,75226-Dec-200702:26x86
Sqlstpcustomdll.dll1.4.1535.02,316,28825-May-200821:45x86

For all supported Itanium-based editions of SQL Server 2000 SP4

Collapse this tableExpand this table
File NameFile VersionFile sizeDateTimePlatform
impprov.dll2000.80.2050.02442243/8/200814:23IA64
MSGPROX.dll2000.80.2050.01889283/8/200814:22IA64
ODSOLE70.dll2000.80.2050.01510403/8/200814:23IA64
OSQL.EXE2000.80.2050.01495043/8/200812:40IA64
PFCLNT80.dll2000.80.2050.011873283/8/200814:31IA64
qrdrsvc.exe2000.80.2050.03568643/8/200814:35IA64
replmerg.exe2000.80.2050.03752963/8/200812:41IA64
REPLPROV.dll2000.80.2050.05376003/8/200814:22ia64
replrec.dll2000.80.2050.07751683/8/200812:40ia64
REPLSUB.dll2000.80.2050.06410243/8/200814:22ia64
rinitcom.dll2000.80.2050.06548483/8/200814:22ia64
semmap.DLL2000.80.2050.01612803/8/200814:21ia64
snapshot.exe2000.80.2050.0911363/8/200814:22ia64
sqlagent.EXE2000.80.2050.010613763/8/200814:33ia64
sqldiag.exe2000.80.2050.03348483/8/200814:24x86
SQLDMO.dll2000.80.2050.0138603523/8/200814:34ia64
sqlservr.exe2000.80.2050.0249251843/8/200812:40ia64
sqlvdi.dll2000.85.2101.03389443/8/200814:31ia64
SVRNETCN.dll2000.80.2050.04270083/8/200814:20ia64
xpstar.DLL2000.80.2050.08729603/8/200814:23ia64

For all supported editions of SQL Server 2000 Desktop Engine (WMSDE)

Collapse this tableExpand this table
File nameFile versionDateTimeFile size
Atl71.dll7.10.3077.030-Nov-200402:0589,088
Dbmslpcn.dll2000.80.2039.004-May-200514:0220,480
Dbmsshrn.dll2000.80.2039.004-May-200514:0221,504
Msvcp71.dll7.10.3077.030-Nov-200402:05499,712
Msvcr71.dll7.10.3052.430-Nov-200402:05348,160
Distrib.exe2000.80.2039.004-May-200511:3661,440
Impprov.dll2000.80.2050.008-Mar-200802:03102,400
Mergetxt.dll2000.80.2039.004-May-200514:0639,656
Msgprox.dll2000.80.2050.008-Mar-200801:5694,208
Rdistcom.dll2000.80.2039.004-May-200514:02425,984
Replagnt.dll2000.80.2039.004-May-200514:028,192
Repldist.dll2000.80.2039.004-May-200514:0277,824
Repldp.dll2000.80.2039.004-May-200514:0294,208
Repldsui.dll2000.80.2039.004-May-200514:0222,016
Repldts.dll2000.80.2039.004-May-200514:0294,208
Replerrx.dll2000.80.2039.004-May-200514:06101,096
Replmerg.exe2000.80.2050.008-Mar-200803:28163,840
Replprov.dll2000.80.2050.008-Mar-200803:29237,568
Replprox.dll2000.80.2039.004-May-200514:02196,608
Replrec.dll2000.80.2050.008-Mar-200810:29315,392
Replsub.dll2000.80.2050.008-Mar-200803:32270,336
Replsync.dll2000.80.2039.004-May-200514:02110,592
Rinitcom.dll2000.80.2050.008-Mar-200803:33278,528
Snapshot.exe2000.80.2050.008-Mar-200803:3461,440
Spresolv.dll2000.80.2039.004-May-200514:0676,544
Sqldistx.dll2000.80.2039.004-May-200514:06170,744
Sqlinitx.dll2000.80.2039.004-May-200514:06142,064
Sqlmergx.dll2000.80.2039.004-May-200514:06178,920
Sqlresld.dll2000.80.2039.004-May-200514:0235,840
Ssradd.dll2000.80.2039.004-May-200514:0647,856
Ssravg.dll2000.80.2039.004-May-200514:0647,864
Ssrdown.dll2000.80.2039.004-May-200514:0624,312
Ssrmax.dll2000.80.2039.004-May-200514:0647,864
Ssrmin.dll2000.80.2039.004-May-200514:0647,864
Ssrpub.dll2000.80.2039.004-May-200514:0624,832
Ssrup.dll2000.80.2039.004-May-200514:0624,824
Replres.rll2000.80.2039.004-May-200514:02159,744
Msxmlsql.dll1.0.1045.007-Apr-200508:27851,128
Msxmlsql.rll1.0.1045.007-Apr-200508:2750,360
Axscphst.dll2000.80.2039.004-May-200514:0261,440
Bcp.exe2000.80.2039.004-May-200511:26122,880
Cldtcstp.exe2000.80.2039.004-May-200511:3577,824
Cldtcstp.rll2000.80.194.006-Aug-200015:0628,672
Cnfgsvr.exe2000.80.2039.004-May-200511:2961,440
Cnvrem.dll2000.80.2039.004-May-200511:2894,208
Cnvsvc.exe2000.80.2039.004-May-200511:2361,440
Custtask.dll2000.80.2039.004-May-200514:02364,544
Dcomscm.exe2000.80.2039.004-May-200511:2911,776
Dtcsetup.exe4.71.1015.016-Jul-199903:27584,416
Dtsffile.dll2000.80.2039.004-May-200514:02126,976
Dtspkg.dll2000.80.2039.004-May-200514:021,986,560
Dtspump.dll2000.80.2039.004-May-200514:02507,904
Dtsrun.exe2000.80.2039.004-May-200511:4233,792
Osql.exe2000.80.2050.008-Mar-200802:0557,344
Pfclnt80.dll2000.80.2050.008-Mar-200801:59430,080
Scm.exe2000.80.2039.004-May-200511:5286,016
Semmap.dll2000.80.2050.008-Mar-200801:5352,224
Semnt.dll2000.80.2039.004-May-200514:0269,632
Sqdedev.dll2000.80.2039.004-May-200514:02126,976
Sqladhlp.exe2000.80.2039.004-May-200512:5073,728
Sqldmo.dll2000.80.2050.008-Mar-200803:274,362,240
Sqlmangr.exe2000.80.2039.004-May-200512:0781,920
Sqlredis.exe5.0.2919.630404-May-200514:0610,223,144
Sqlsvc.dll2000.80.2039.004-May-200514:02110,592
Sqlvdi.dll2000.80.2050.008-Mar-200803:4043,008
Svrnetcn.dll2000.80.2050.008-Mar-200803:42110,592
Svrnetcn.exe2000.80.2039.004-May-200512:1834,304
W95scm.dll2000.80.2039.004-May-200514:0241,984
Axscphst.rll2000.80.194.006-Aug-200015:5028,672
Bcp.rll2000.80.2039.004-May-200514:029,216
Custtask.rll2000.80.2039.004-May-200514:0248,640
Dtsffile.rll2000.80.194.006-Aug-200015:5028,672
Dtspkg.rll2000.80.2039.004-May-200514:02208,896
Dtspump.rll2000.80.194.006-Aug-200015:50102,400
Dtsrun.rll2000.80.194.006-Aug-200015:5024,576
Pfclnt80.rll2000.80.194.006-Aug-200015:5028,672
Semmap.rll2000.80.194.006-Aug-200015:5032,768
Semnt.rll2000.80.382.018-Apr-200113:2112,288
Sqladevn.rll2000.80.2039.004-May-200514:026,656
Sqldmo.rll2000.80.2039.004-May-200514:02585,728
Sqlmangr.rll2000.80.194.006-Aug-200015:5098,304
Sqlsvc.rll2000.80.382.018-Apr-200113:2112,288
Svrnetcn.rll2000.80.2039.004-May-200514:0216,896
Wn95scm.h09-May-200115:081,341
W95scm.lib04-May-200511:247,070
Atxcore.dll2000.80.2039.004-May-200511:3137,376
Cmdwrap.exe2000.80.2039.004-May-200512:235,632
Comnevnt.dll2000.80.194.026-Apr-200409:35319,488
Dbghelp.dll6.3.17.006-Aug-200406:38940,032
Msdbi.dll6.10.8226.026-Apr-199914:00102,672
Mssql.mib26-Apr-200409:4626,740
Odsole70.dll2000.80.2050.008-Mar-200802:0469,632
Opends60.dll2000.80.2039.004-May-200514:0210,240
Sqlagent.dll2000.80.2039.004-May-200514:0212,288
Sqlagent.exe2000.80.2050.008-Mar-200801:59323,584
Sqlatxss.dll2000.80.2039.004-May-200514:0236,864
Sqlboot.dll2000.80.2050.013-Mar-200823:01140,312
Sqlcmdss.dll2000.80.2039.004-May-200514:0243,520
Sqlctr.h09-May-200114:464,516
Sqlctr.ini26-Apr-200409:3719,984
Sqlctr80.dll2000.80.2039.004-May-200514:0240,960
Sqldata.dll2000.80.2039.004-May-200514:02815,104
Sqlimage.dll5.0.2031.126-Apr-199914:0036,112
Sqlmaint.exe2000.80.2039.004-May-200512:07167,936
Sqlrepss.dll2000.80.2039.004-May-200514:0265,536
Sqlservr.exe2000.80.2050.008-Mar-200805:539,154,560
Sqlsnmp.dll2000.80.2039.004-May-200514:0253,760
Sqlsort.dll2000.80.2050.008-Mar-200801:53589,824
Sqlstbss.exe2000.80.2039.004-May-200512:186,144
Ssmsad70.dll2000.80.2039.004-May-200514:0221,504
Ssmslpcn.dll2000.80.2039.004-May-200514:0218,432
Ssmsrp70.dll2000.80.2039.004-May-200514:0222,016
Ssmssh70.dll2000.80.2039.004-May-200514:0220,480
Ssmsvi70.dll2000.80.194.006-Aug-200015:5132,823
Ssnetlib.dll2000.80.2039.004-May-200514:0286,016
Ssnmpn70.dll2000.80.2039.004-May-200514:0210,240
Ums.dll2000.80.2050.008-Mar-200805:4935,328
W9xctrs.reg14-Apr-200114:3612,438
Xplog70.dll2000.80.2039.004-May-200514:0243,520
Xpqueue.dll2000.80.2039.004-May-200514:0245,056
Xprepl.dll2000.80.2039.004-May-200514:02155,648
Xpsqlbot.dll2000.80.2039.004-May-200514:027,680
Xpstar.dll2000.80.2050.008-Mar-200802:02311,296
Atxcore.rll2000.80.2039.004-May-200511:294,608
Odsole70.rll2000.80.382.018-Apr-200113:2120,480
Sqlagent.rll2000.80.2039.004-May-200514:0253,248
Sqlatxss.rll2000.80.194.006-Aug-200015:5024,576
Sqlcmdss.rll2000.80.2039.004-May-200514:025,632
Sqlevn70.rll2000.80.2050.008-Mar-200801:5245,056
Sqlmaint.rll18-Apr-200113:2132,768
Sqlrepss.rll2000.80.2039.004-May-200514:025,120
Sqlstbss.rll2000.80.2039.004-May-200512:183,584
Xplog70.rll2000.80.2039.004-May-200514:026,656
Xpstar.rll2000.80.2039.004-May-200514:0236,864
Master.mdf04-May-200513:3213,893,632
Mastlog.ldf04-May-200513:32524,288
Model.mdf04-May-200513:32655,360
Modellog.ldf04-May-200513:32524,288
Msdbdata.mdf04-May-200513:313,145,728
Msdblog.ldf04-May-200513:31524,288
80sp1-tools.sql14-Apr-200114:5472,550
80sp2-tools.sql04-Oct-200108:381,639
80sp3-tools.sql21-Oct-200205:29141,004
80sp4-tools.sql26-Dec-200705:46132,852
Ansiview.sql05-Jul-200014:0433,853
Instcat.sql04-May-200512:35956,866
Instdist.sql26-Dec-200705:44749,709
Instlang.sql21-Oct-200205:1836,298
Instls.sql09-May-200115:0552,628
Instmsdb.sql22-Apr-200507:56747,032
Messages.sql19-Apr-200502:21734,339
Odsole.sql26-Apr-200409:371,873
Oledbsch.sql05-Jul-200014:0510,190
Procsyst.sql26-Dec-200705:39552,068
Replcom.sql08-Mar-200801:541,214,694
Replmerg.sql08-Mar-200810:351,151,444
Replsys.sql26-Dec-200705:441,096,209
Repltran.sql26-Dec-200705:44999,165
Servmsgs.sql04-May-200512:4858,772
Sp1_repl.sql24-Apr-200104:251,742,437
Sp1_serv_uni.sql14-Apr-200114:36140,748
Sp2_repl.sql13-Oct-200110:36674,264
Sp2_serv_uni.sql04-Oct-200108:1815,622
Sp3_repl.sql05-Dec-200201:52557,890
Sp3_replcom.sql08-Mar-200801:541,214,694
Sp3_replmerg.sql08-Mar-200810:351,151,444
Sp3_replsys.sql26-Dec-200705:441,096,209
Sp3_repltran.sql26-Dec-200705:44999,165
Sp3_serv_uni.sql19-Apr-200502:21104,898
Sp4_serv_uni.sql08-Mar-200801:40156,802
Sqldmo.sql04-May-200512:25186,441
Sysmessages.sym04-May-200513:32731,156
Upgrade.sql08-Jul-200407:49387,712
U_tables.sql25-Sep-200403:0955,444
Web.sql05-Jul-200014:1716,324
Xpstar.sql19-Apr-200502:2173,114
Dbnetlib.dll2000.85.1117.029-Apr-200400:00106,496
Odbcbcp.dll2000.85.1117.029-Apr-200400:0124,576
Sqlsrv32.dll2000.85.1117.029-Apr-200400:00421,888
Sqlsrv32.rll2000.85.1117.029-Apr-200400:0090,112
Sqlunirl.dll2000.80.2039.004-May-200514:02192,512

Properties

Article ID: 948110 - Last Review: May 9, 2012 - Revision: 8.0
APPLIES TO
  • Microsoft Windows Server 2003 Service Pack 2, when used with:
    • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
    • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
    • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
    • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
    • Microsoft Windows Server 2003, Web Edition
    • Microsoft Windows Server 2003, Datacenter x64 Edition
    • Microsoft Windows Server 2003, Enterprise x64 Edition
    • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003 Service Pack 1, when used with:
    • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
    • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
    • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
    • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
    • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows 2000 Service Pack 4, when used with:
    • Microsoft Windows 2000 Advanced Server
    • Microsoft Windows 2000 Professional Edition
    • Microsoft Windows 2000 Server
Keywords: 
atdownload kbbug kbexpertiseinter kbfix kbpubtypekc kbsecbulletin kbsecurity kbsecvulnerability KB948110

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com