This article has been archived. It is offered "as is" and will no longer be updated.
BUG # : 469140 (SQL Server 8.0)
When you create a database that has a Transact-SQL statement embedded in the database name, the Transact-SQL statement runs with System Administrator permissions when a SQL Profiler user tries to save the trace file as a trace table in the same instance of SQL Server 2000.
Service pack information
To resolve this problem, obtain the latest service pack for Microsoft SQL Server 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
290211 How to obtain the latest SQL Server 2000 service pack
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
Note Because of file dependencies, the most recent hotfix or feature that contains these files may also contain additional files.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.This problem was first corrected in Microsoft SQL Server 2000 Service Pack 4.
Although a user in the Database Creator fixed server role does not have System Administrator permissions, a Transact-SQL statement that the user creates may run with System Administrator permissions. This problem may occur when the user creates a database and embeds the Transact-SQL statement in the database name. When a SQL Profiler user starts a trace and saves the trace file as a trace table, the Destination Table dialog box initializes with the names of all the databases that are available at the instance of SQL Server 2000. The code that is embedded in the database name runs with System Administrator permissions during this initialization.
Microsoft SQL Server 2000 Developer Edition, Microsoft SQL Server 2000 Standard Edition, Microsoft SQL Server 2000 Enterprise Edition, Microsoft SQL Server 2000 Personal Edition, Microsoft SQL Server 2000, Workgroup Edition, Microsoft SQL Server 2000 Desktop Engine (Windows), Microsoft SQL Server 2000 Enterprise Edition 64-bit