Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jet | Microsoft | 4.0 (including) | 4.0 (including) |
| Jet | Microsoft | 4.0-sp1 (including) | 4.0-sp1 (including) |
| Jet | Microsoft | 4.0-sp2 (including) | 4.0-sp2 (including) |
| Jet | Microsoft | 4.0-sp3 (including) | 4.0-sp3 (including) |
| Jet | Microsoft | 4.0-sp4 (including) | 4.0-sp4 (including) |
| Jet | Microsoft | 4.0-sp5 (including) | 4.0-sp5 (including) |
| Sql_server | Microsoft | 2000 (including) | 2000 (including) |
| Sql_server | Microsoft | 2000-sp1 (including) | 2000-sp1 (including) |
| Sql_server | Microsoft | 2000-sp2 (including) | 2000-sp2 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=102450188620081\u0026w=2
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010
- http://www.iss.net/security_center/static/9375.php
- http://www.nextgenss.com/advisories/mssql-ods.txt
- http://www.securityfocus.com/bid/5057
- http://marc.info/?l=bugtraq\u0026m=102450188620081\u0026w=2
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010
- http://www.iss.net/security_center/static/9375.php
- http://www.nextgenss.com/advisories/mssql-ods.txt
- http://www.securityfocus.com/bid/5057