Microsoft has provided an updated release of its security update for SQL Server 7.0 Service Pack 4 (SP4). The article "INF: SQL Server 7.0 Security Update for Service Pack 4" (Q327068, http://support.microsoft.com ) says that the security update now includes a previously reported fix that prevents an attacker from running existing Web tasks in the context of the creator of the Web task or inserting his own Web tasks into the SQL Server system.