Silly question.... I don't have SQL servers open to the public so I'm not really up on it.....

If that is the error response that is provided publicly isn't that a security breach in itself? In my reading it seems that the "standard" is to give a "nothing" error such as "The query cannot be completed" rather than dump the entire table structure for the attacker to see. It's my recollection that they use these verbose errors to enumerate the table structures themselves.....

... or am I wrong here?