HTTP: Quest Toad DBA Suite for Oracle ActiveX
This signature detects attempts to use unsafe ActiveX controls in Quest Toad DBA Suite. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.
Extended Description
Quest Toad DBA Suite for Oracle ActiveX control is prone to an arbitrary-file-overwrite vulnerability. Attackers can overwrite arbitrary files on the victim's computer in the context of the vulnerable application that is using the ActiveX control (typically Internet Explorer).
Affected Products
Quest_software toad_dba_suite_for_oracle
References
BugTraq: 52920
URL: http://support.microsoft.com/kb/240797 http://www.quest.com/toad-dba-suite-for-oracle/
Short Name
HTTP:STC:ACTIVEX:QUEST-TOAD-DBA
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
ActiveX DBA Oracle Quest Suite Toad bid:52920 for
Release Date
04/11/2012
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Quest_software