He will show how SQL injection on SQL Server 2000 and 2005 can be used to exploit a known buffer overflow bug in SQL Server that has already been patched by Microsoft. A separate privilege escalation ...