By passing 154 characters into a 128 character buffer, an attacker can set a new password for sa without knowing the old password.

• 通过向128个字符的缓冲区传递154个字符,攻击者便可以在不知道旧密码的情况下为sa设置新密码。