For those that are curious, here is a blog rundown of that attack vector by Andreas.
http://www.insidesql.org/blogs/andreaswolter/
Jason...AKA CirqueDeSQLeil
_______________________________________________
I have given a name to my pain...MCM SQL Server, MVP
SQL RNNR
Posting Performance Based Questions - Gail Shaw[/url]
Learn Extended Events