Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Data_engine | Microsoft | 1.0 (including) | 1.0 (including) |
| Sql_server | Microsoft | 7.0 (including) | 7.0 (including) |