Microsoft Security Bulletin MS04-014

Microsoft Security Bulletin MS04-014 Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution 837001 Issued: April 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® Impact of vulnerability: Remote Code Execution Maximum Severit...

MS04-014: Microsoft Hotfix (credentialed check) (837001)

The remote host has a bug in its Microsoft Jet Database Engine 837001. An attacker could exploit one of these flaws to execute arbitrary code on the remote system. To exploit this flaw, an attacker would need the ability to craft a specially malformed database query and have this engine execute i...

Microsoft Jet Database Engine database request handling buffer overflow

Overview The Microsoft Jet Database Engine Jet provides data access functionality to a number of other Microsoft and many third party applications. A buffer overflow vulnerability exists in the Jet Database Engine that could allow a remote attacker to execute code of their choosing on an affected...

Microsoft Jet Database Engine Remote Code Execution Vulnerability

Description It has been reported that Microsoft Jet Database Engine Jet is prone to a remote code execution vulnerability that that may allow remote attackers to execute arbitrary code in order to gain unauthorized access to a vulnerable system. This issue presents itself when a specially crafted...

Microsoft SQL Server 7.0/2000 JET Database Engine 4.0 - Buffer Overrun

source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying data supplied via a remote source and is due to insufficient bounds...

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying dat...

Sitespring Server DoS

Sending predefined byte sequence to TCP/2500 causes database engine to crash...

CVE-2001-0599

Sybase Adaptive Server Anywhere Database Engine (version 6.0.3.2747 and earlier, as included with Symantec Ghost 6.5) is affected. A remote attacker can trigger a denial of service by sending large (>45 KB) amounts of data to port 2638. The provided connected documents do not include further e...

CVE-2001-0599: Undefined Security Weakness

Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large 45Kb amounts of data to port 2638...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

CVE-2000-0981: Undefined Security Weakness

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

CVE-2000-0323

Technical details are not publicly available in the provided documents. No specifics on affected products, versions, or mitigation are disclosed. Monitor for updates.

CVE-2000-0323

The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability...

CVE-2000-0323: Undefined Security Weakness

The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability...

CVE-2000-0325

The Microsoft Jet database engine (specifically drivers MSJET35.DLL and MSJET40.DLL ) contains a vulnerability known as the VBA Shell vulnerability. This flaw allows an attacker to execute arbitrary commands by creating malicious .xls or .doc files that incorporate VBA shell commands. When a user...

CVE-2000-0325: Undefined Security Weakness

The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability...

Microsoft Data Access Components (MDAC) 2.1 / Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 / Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS (2)

source: https://www.securityfocus.com/bid/529/info MDAC Microsoft Data Access Components is a package used to integrate web and database services. It includes a component named RDS Remote Data Services. RDS allows remote access via the internet to database objects through IIS. Both are included i...

Microsoft IIS 4.0 / Microsoft JET 3.5/3.5.1 Database Engine - VBA

source: https://www.securityfocus.com/bid/286/info Microsoft's JET database engine feature allows the embedding of Visual Basic for Application in SQL string expressions and the lack of metacharacter filtering by many web applications may allow remote users to execute commands on the system...

Service Pack 1 for Microsoft Access Database Engine 2010 (KB2460011) 64-bit Edition

Service Pack 1 SP1 for Microsoft Access Database Engine 2010 64-bit Edition contains new updates which improve security, performance, and stability. Additionally, the SP is a roll-up of all previously released updates...