Microsoft OWC DataSourceControl ConnectionFile Local File Existence Disclosure Vulnerability
BID:4456
Info
Microsoft OWC DataSourceControl ConnectionFile Local File Existence Disclosure Vulnerability
| Bugtraq ID: | 4456 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 08 2002 12:00AM |
| Updated: | Apr 08 2002 12:00AM |
| Credit: | Discovered by GreyMagic Software <[email protected]>. |
| Vulnerable: |
Microsoft Office Web Components 2002 |
| Not Vulnerable: | |
Exploit / POC
Microsoft OWC DataSourceControl ConnectionFile Local File Existence Disclosure Vulnerability
An exploit is provided in the GreyMagic advisory listed in the references section of this document.
An exploit is provided in the GreyMagic advisory listed in the references section of this document.
Solution / Fix
Microsoft OWC DataSourceControl ConnectionFile Local File Existence Disclosure Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft OWC DataSourceControl ConnectionFile Local File Existence Disclosure Vulnerability
References:
References: