Mark Litchfield of Next Generation Security Software (NGSSoftware)discovered a vulnerability in SQL Server 2000 when used in conjunction with the Microsoft Jet 4.0 database engine that can lead to an attacker executing arbitrary code on the vulnerable system.
