10.290.2002 - MS02-061: Elevation of Privilege in SQL Server 7.0/2000 Web Tasks (316333)

An attacker who is able to authenticate to a SQL server could delete, insert or update all the web tasks created by other users. In addition, the attacker could run already created web tasks in the context of the creator of the web task. This typically runs in the context of the SQL Server Agent service account. - View Microsoft Security Bulletin MS02-061 - View Microsoft Knowledge Base Article - 316333 - Visit Microsoft Corporation