Hacking a SQL Server
Here is a rather lengthy but interesting description of the general exploits that are possible against MS SQL server. The article also includes suggestions for countermeasures.
Hacking a SQL Server
Hacking a SQL Server