Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.