FIX: Potential English Query Security Issue (297105)



The information in this article applies to:

  • Microsoft SQL Server 2000 (all editions)
  • Microsoft SQL Server 7.0

This article was previously published under Q297105
BUG #: 101596 (SQLBUG_70)
BUG #: 353115 (SHILOH)

SYMPTOMS

If you are running Microsoft SQL Server English Query applications or Model testing English Query applications with Microsoft Visual Studio, you should apply the English Query update to ensure the most robust English Query server configuration.

RESOLUTION

SQL Server 7.0

A supported fix is now available from Microsoft, but it is only intended to correct the problem described in this article and should be applied to all Microsoft SQL Server English Query applications.

To resolve this problem immediately, the following file is available for download from the Microsoft Download Center: The s70992i.exe file contains the following files:
File name      Size        Date
-------------------------------------
Mseqbase.dll   6,028,560   4/27/2001
Mseqcore.eqd   1,190,912   4/27/2001
Readme.txt     1,968       5/1/2001
				
Release Date: MAY-06-2001


For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

SQL Server 2000

A supported fix is now available from Microsoft, but it is only intended to correct the problem described in this article and should be applied to all Microsoft SQL Server English Query applications.

To resolve this problem immediately, the following file is available for download from the Microsoft Download Center: The s80286i.exe file contains the following files:
File name      Size        Date
-------------------------------------

Mseqbase.dll   6,385,718   4/23/2001
Mseqcore.eqd   1,182,720   4/23/2001
Readme.txt     2,160       4/25/2001
				
Release Date: MAY-6-2001

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How To Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

WORKAROUND

All customers that use Microsoft SQL Server English Query applications should download and apply the fix that is appropriate for their version of Microsoft SQL Server.

STATUS

Microsoft has confirmed this to be a problem in SQL Server 7.0 and SQL Server 2000.

MORE INFORMATION

Steps to Install the Fix

To install the fix, use these steps:
  1. Download the appropriate Microsoft English Query patch (s70992i.exe for SQL Server 7.0 and s80286i.exe for SQL Server 2000) by clicking the link to the file shown in the "Resolution" section.
  2. Extract the patch in the downloaded file by running the self-extracting executable file.
  3. Follow the instructions in the Readme.txt file that is included with the downloaded file.

Modification Type:MinorLast Reviewed:8/5/2004
Keywords:kbdownload kbdownload kbBug kbfile kbfix kbgraphxlinkcritical kbQFE KB297105