Microsoft SQL MS Jet Engine Unicode Buffer Overflow Vulnerability

Bugtraq ID:	5057
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 19 2002 12:00AM
Updated:	Jun 19 2002 12:00AM
Credit:	Discovery of this issue is credited to NGSSoftware.
Vulnerable:	Microsoft SQL Server 2000 SP2 Microsoft SQL Server 2000 SP1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 Microsoft SQL Server 2000 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 Microsoft JET 4.0 SP5 Microsoft JET 4.0 SP4 Microsoft JET 4.0 SP3 Microsoft JET 4.0 SP2 Microsoft JET 4.0 SP1 Microsoft JET 4.0 + Microsoft Access 2000 + Microsoft Access 2000
Not Vulnerable:	Microsoft JET 4.0 SP6

Microsoft SQL MS Jet Engine Unicode Buffer Overflow Vulnerability

Microsoft SQL Server is prone to a remotely exploitable unicode-based buffer overflow condition. This condition occurs when the OpenDataSource function is used with MS Jet Engine.

This issue may be exploited to execute attacker-supplied instructions with the privileges of the SQL Server process. This issue requires that the attacker can pass malicious data to the OpenDataSource function and may be exploitable remotely via SQL injection vulnerabilities in web-based software.

Due to this being an issue in the MS Jet Engine component itself, other products which rely on Jet Engine may also be affected by this vulnerability.

We previously alerted on this issue in BID 4847 "Microsoft SQL Server 2000 Multiple Vulnerabilities". This issue was originally publicized as a VNA by NGSSoftware.

Microsoft SQL MS Jet Engine Unicode Buffer Overflow Vulnerability

References:

• Microsoft Technet Security (Microsoft)