CVE:CVE-2002-1145
CNNVD:CNNVD-200210-306
Microsoft SQL服务器7.0和2000版本，Microsoft Data Engine (MSDE) 1.0版本，和Microsoft Desktop Engine (MSDE) 2000版本中进程中储存的xp_runwebtas可以被PUBLIC执行。攻击者可以通过无强烈许可的msdb.dbo.mswebtasks表格的更新数据库拥有者拥有的webtask提升特权。
solution:Upgrade microsoft data_engine to a higher version than 1.0,2000,and avoid the version 1.0,2000; Upgrade microsoft sql_server to a higher version than 7.0,7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,2000,2000:sp1,2000:sp2,and avoid the version 7.0,7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,2000,2000:sp1,2000:sp2