关于ms-sql-s (1433/tcp) 漏洞,请教高人如何弥补?

jbjbjb

win2000 服务器系统(SP4),SQL2000(SP3)
我用X-Scan扫描系统漏洞发现了这个,但是不知道如何解决,先把扫描后的内容帖上,请高人们帮忙!!!

The remote MS SQL server is vulnerable to the Hello overflow.

An attacker may use this flaw to execute commands against
the remote host as LOCAL/SYSTEM, as well as read your database content.

*** This alert might be a false positive.

Solution : Install Microsoft Patch Q316333 at
http://support.microsoft.com/default.aspx?scid=kb
en-us
Q316333&sd=tech
or disable the Microsoft SQL Server service or use a firewall to protect the
MS SQL port (1433).

Risk factor : High
CVE_ID : CAN-2002-1123
BUGTRAQ_ID : 5411
NESSUS_ID : 11067

wfwh

装补丁！

jbjbjb

SQL的SP3已经打了但是还扫描出了上面的漏洞。请指教！~

厨师

上面不是写了吗？

Solution : Install Microsoft Patch Q316333 at
http://support.microsoft.com/default.aspx?scid=kb
en-us
Q316333&sd=tech
or disable the Microsoft SQL Server service or use a firewall to protect the
MS SQL port (1433).

MS的Patch Q316333有没有打过呀？

jbjbjb

SQL2000我打了SP3的了阿,还是不行
在这里(http://support.microsoft.com/default.aspx?scid=kb;en-us;316333)看了半天也没找到原因(英语盲),哪位老大可以帮我看看阿谢谢拉真是好人多哈