Off-topic: Has anyone solved the new MS SQL injection hack?

Quick question for all you programmers. I’m dealing with an MS SQL injection problem on a site running Windows 2000 and MS SQL 2003. Has anyone seen/solved this problem yet?