HTTP: Microsoft JET Database Code Execution

This signature detects attempts to exploit a known vulnerability in the Microsoft JET database engine. Attackers can remotely execute commands on the target system.

Extended Description

It has been reported that Microsoft Jet Database Engine (Jet) is prone to a remote code execution vulnerability that that may allow remote attackers to execute arbitrary code in order to gain unauthorized access to a vulnerable system. This issue presents itself when a specially crafted database query is sent by an attacker to be interpreted by Jet. A successful attack may allow the attacker to gain complete control of the affected system. Microsoft Jet Database Engine version 4.0 running on various Microsoft operating systems is reported to be vulnerable to this issue.

Affected Products

Avaya s8100_media_servers,Microsoft windows_server_2003_enterprise_edition

References

BugTraq: 10112

CVE: CVE-2004-0197

URL: http://www.securityfocus.com/archive/1/20151 http://www.microsoft.com/technet/security/Bulletin/MS04-014.mspx http://www.securitytracker.com/alerts/2004/Apr/1009757.html

Short Name

HTTP:PKG:MS-JET-VBA

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Microsoft JET Database Code Execution

Extended Description

Affected Products

References

Found a potential security threat?