Robert Goldman wrote: > I believe I just saw something about this in the > SANS NewsBites. Here you go: > > http://www.incidents.org/diary/diary.php?id=152 Here is what Microsoft says: http://support.microsoft.com/default.aspx?scid=kb;EN- US;Q313418 I work as a SQL Server DBA, so this is of immediate interest to me. Incidentally, I went to a SQL Server conference in January, not long after Bill Gates made his announcement about Security being the Microsoft's Top Priority. In the course of the three days I heard almost nothing from the many Microsoft representatives about security. Instead, there was a lot of talk about "exposing" (Their word!!) SQL Server systems via web services (.Net). Glenn McDavid mailto:gmcdavid at attbi.com mailto:gmcdavid at winternet.com http://www.winternet.com/~gmcdavid