Allaire Security Bulletin (ASB00-17): Microsoft Patch Updated for "DTS Password" Vulnerability
Microsoft has announced the release of an updated patch to eliminate a security vulnerability in Microsoft(r) SQL Server 7.0. Without the patch, a malicious user could compromise passwords. The updated patch also addresses a related problem with the Enterprise Manager Server registration dialog. "This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users. Allaire recommends that customers follow the instructions posted on the Microsoft Web site to address this issue."
Source: Allaire Article 16484