He will show how SQL injection on SQL Server 2000 and 2005 can be used to exploit a known buffer overflow bug in SQL Server that has already been patched by Microsoft. A separate privilege escalation ...

The point of an SQL Injection attack is to compromise a database, which is an organized collection of data and supporting data structures. The data can include user names, passwords, text, etc.

Newly discovered Vollgar attack uses brute force to infect vulnerable Microsoft SQL servers at a high rate.