-----BEGIN PGP SIGNED MESSAGE-----

===========================================================================

              AUSCERT External Security Bulletin Redistribution
                             
           ESB-2000.041 -- Microsoft Security Bulletin (MS00-014)
             Patch Available for "SQL Query Abuse" Vulnerability
                                09 March 2000

===========================================================================

Microsoft Corporation has released the following security bulletin
concerning a vulnerability in Microsoft SQL Server 7.0 and Microsoft Data
Engine (MSDE) 1.0.  This vulnerability may allow the remote author of
a malicious SQL query to take unauthorized actions on a SQL Server or MSDE
database or on the underlying system that was hosting the SQL Server or
MSDE database.

	http://www.microsoft.com/technet/Security/Bulletin/ms00-014.asp

===========================================================================

This security bulletin is provided as a service to AusCERT's members.
As AusCERT did not write the document referenced above, AusCERT has
had no control over its content.  The decision to use any or all
of this information is the responsibility of each user or organisation,
and should be done so in accordance with site policies and procedures.

If you have any questions or need further information, please contact 
Microsoft Corporation directly.

Previous advisories and external security bulletins can be retrieved from:

	http://www.auscert.org.au/Information/advisories.html

If you believe that your system has been compromised, contact AusCERT or
your representative in FIRST (Forum of Incident Response and Security
Teams).

Internet Email: auscert@auscert.org.au
Facsimile:	(07) 3365 7031
Telephone:	(07) 3365 4417 (International: +61 7 3365 4417)
		AusCERT personnel answer during Queensland business hours
		which are GMT+10:00 (AEST).
		On call after hours for emergencies.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key

iQCVAwUBOMy1rCh9+71yA2DNAQEyCAP8DSrxuC/fOjeBn4wGSP5EWG/OxXCOCUKo
0kCa9tr1Bw3nHJ1uHI4UDTVuv36y0jPuGq0s6PhIy2KwX+QmEOdO+GnSDl0s3ENw
YS6GPZxgdUy0A13Xs0Fp6H4XNFYXy6kAdOoKdqnLZLRGx0qpjbzuENaJb9g4N4rD
2+gq+5UGKJY=
=lsAG
-----END PGP SIGNATURE-----