INF: SQL Server 7.0 Security Update for Service Pack 3 (318268)


The information in this article applies to:

  • Microsoft SQL Server 7.0 Service Pack 3
This article was previously published under Q318268
This article discusses a security or privacy issue that may affect the operation of your computer. The information in this article is provided "as-is" without warranty of any kind. The workaround or hotfix that is described in this article addresses the issue as it is currently understood, but may not protect against any undiscovered variants of this issue. Microsoft recommends that you apply this cumulative patch or implement the workarounds if one is provided.

SUMMARY

Microsoft distributes SQL Server 7.0 security fixes as one downloadable file. Because the security fixes are cumulative, each new release contains all of the security fixes that were included with the previous SQL Server 7.0 security fix release. You do not have to install the previous patch before you install the latest one. This Microsoft Knowledge Base article contains a list of all the security fixes that are available for SQL Server 7.0 Service Pack 3 (SP3). Before you apply the patch, you must install SQL Server 7.0 Service Pack 3 (SP3).

For additional information about the cumulative security patch for SQL Server 2000, click the article number below to view the article in the Microsoft Knowledge Base:

316333 INF: SQL Server 2000 Security Update for Service Pack 2

MORE INFORMATION

April 17, 2002 Release

This release of the SQL Server 7.0 security cumulative package contains the following fix:

319507 SQL Extended Procedure Functions Contain Unchecked Buffers

For more information about this vulnerability, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS02-020.mspx

The following files are available for download from the Microsoft Download Center:

Intel

English: DownloadDownload 7.00.1030_SQL7_sp3_x86_enu.exe now

French: DownloadDownload 7.00.1030_SQL7_sp3_x86_frn.exe now

German: DownloadDownload 7.00.1030_SQL7_sp3_x86_ger.exe now

Japanese: DownloadDownload 7.00.1030_SQL7_sp3_x86_jpn.exe now

Spanish: DownloadDownload 7.00.1030_SQL7_sp3_x86_spa.exe now

Alpha

English: DownloadDownload 7.00.1030_SQL7_sp3_alpha_enu.exe now

Japanese: DownloadDownload 7.00.1030_SQL7_sp3_alpha_jpn.exe now


Release Date: APR-17-2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

x86

   Date         Time   File Version  Product    Size             File Name
                                     Version    
   ---------------------------------------------------------------------------
   03-Apr-2002  21:44                           4,362,608 bytes  Sqlservr.dbg   
   03-Apr-2002  21:44  2000.28.3.0   7.00.1028  5,054,736 bytes  Sqlservr.exe
   14-Feb-2002  13:37  2000.26.11.0  7.00.1021    586,000 bytes  Sqlsort.dll
   05-Apr-2002  21:04  2000.28.5.0   7.00.1030     53,248 bytes  Xplog70.dll
   05-Apr-2002  21:04  2000.28.5.0   7.00.1030     45,056 bytes  Xpsql70.dll
   05-Apr-2002  21:04  2000.28.5.0   7.00.1030    196,608 bytes  Xpstar.dll
   05-Apr-2002  21:04  2000.28.5.0   7.00.1030    151,552 bytes  Xpweb70.dll


Alpha


   Date         Time   File Version  Product    Size              File Name
                                     Version    
   ---------------------------------------------------------------------------
   04-Apr-2002  01:45                           13,428,960 bytes  Sqlservr.dbg
   04-Apr-2002  01:44  2000.28.3.0   7.00.1028  11,651,344 bytes  Sqlservr.exe
   14-Feb-2002  17:37  2000.26.11.0  7.00.1021     593,168 bytes  Sqlsort.dll
   06-Apr-2002  01:04  2000.28.5.0   7.00.1030      38,400 bytes  Xplog70.dll
   06-Apr-2002  01:04  2000.28.5.0   7.00.1030      35,840 bytes  Xpsql70.dll
   06-Apr-2002  01:04  2000.28.5.0   7.00.1030     210,944 bytes  Xpstar.dll
   06-Apr-2002  01:04  2000.28.5.0   7.00.1030     226,816 bytes  Xpweb70.dll

February 20, 2002 Release


This release of the SQL Server 7.0 security cumulative package contains the following fix:

317979 FIX: Unchecked Buffer May Occur When You Connect to Remote Data Source

For more information about this vulnerability, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS02-007.mspx

If you have already applied this security update to a non-English version of SQL Server between February 20, 2002 and February 23, 2002, you must download the corresponding localized package and update the Xpstar.dll file as described in the Readme.txt file that is included in the package.

The following files are available for download from the Microsoft Download Center:

Intel

English: DownloadDownload S71021i.exe now

French: DownloadDownload S71021i_frn.exe now

German: DownloadDownload S71021i_ger.exe now

Japanese: DownloadDownload S71021i_jpn.exe now

Spanish: DownloadDownload S71021i_esn.exe now

Alpha

English: DownloadDownload S71021a.exe now

Japanese: DownloadDownload S71021a_jpn.exe now


Release Date: FEB-20-2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

x86

   Date         Time   File Version  Product    Size             File Name
                                     Version    
   ---------------------------------------------------------------------------
   18-Feb-2002  20:18                           4,362,272 bytes  Sqlservr.dbg
   18-Feb-2002  20:19  2000.26.18.0  7.00.1021  5,054,736 bytes  Sqlservr.exe 
   14-Feb-2002  13:37  2000.26.11.0  7.00.1021    586,000 bytes  Sqlsort.dll
   13-Feb-2002  00:45  2000.26.11.0  7.00.1021    196,608 bytes  Xpstar.dll

Alpha

   Date         Time   File Version  Product    Size              File Name
                                     Version    
   -----------------------------------------------------------------------------
   18-Feb-2002  20:18                           13,434,824 bytes  Sqlservr.dbg
   18-Feb-2002  20:19  2000.26.18.0  7.00.1021  11,657,488 bytes  Sqlservr.exe
   14-Feb-2002  13:37  2000.26.11.0  7.00.1021     593,168 bytes  Sqlsort.dll
   13-Feb-2002  00:45  2000.26.11.0  7.00.1021     210,432 bytes  Xpstar.dll

Fixes Released on January 24, 2002

This release of the SQL Server 7.0 security cumulate package contains the following fix:

304851 FIX: SQL Server Text Formatting Functions Contain Unchecked Buffers

For more information about this vulnerability, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS01-060.mspx

The following files are available for download from the Microsoft Download Center:

Intel

DownloadDownload S71020i.exe now

Alpha

DownloadDownload S71020a.exe now



Release Date: JAN-24-2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

x86

   Date        Time    File Version Product     Size             File Name
                                    Version    
   -------------------------------------------------------------------------
   17-Apr-2002  12:34                           5,341,528 bytes  S71020i.exe
   21-Jan-2002  04:07                           4,359,192 bytes  Sqlservr.dbg
   21-Jan-2002  04:06  2002.1.20.0   7.00.1020  5,054,736 bytes  Sqlservr.exe
   14-Jan-2001  04:39  2001.1.13.0   7.00.978     586,000 bytes  Sqlsort.dll

Alpha

   Date         Time   File Version  Product    Size              File Name
                                     Version    
   ----------------------------------------------------------------------------
   17-Apr-2002  12:39                           10,564,440 bytes  S71020a.exe
   21-Jan-2002  04:07                           13,523,808 bytes  Sqlservr.dbg
   21-Jan-2002  04:07  2002.1.20.0   7.00.1020  11,706,128 bytes  Sqlservr.exe
   14-Jan-2001  04:39  2001.1.13.0   7.00.978      593,168 bytes  Sqlsort.dll

Comments about this or other Microsoft Knowledgbase articles? Drop us a note at SQLKB@Microsoft.com
Modification Type:MinorLast Reviewed:8/10/2004
Keywords:ATdownload kbdownload kbbug kbfix kbQFE kbSecurity kbSQLServ700preSP4fix KB318268
©2004 Microsoft Corporation. All rights reserved.