Important Security Update for SQL Server MS08-040
Microsoft have released a set of security updates for SQL 7, 2000 and 2005 to resolve four privately disclosed vulnerabilities. For details of the affected systems and vulnerabilities see Microsoft Security Bulletin MS08-040. Note that if you have already applied Cumulative Update 7 or higher for SQL Server 2005 SP2 then you already have these fixes as they were included in CU7 released in April.