Microsoft Virtual Machine Unauthorized ODBC Data Access Vulnerability

Bugtraq ID:	5772
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 23 2002 12:00AM
Updated:	Sep 23 2002 12:00AM
Credit:	Discovery of this vulnerability credited to Jouko Pynnonen <[email protected]>.
Vulnerable:	Microsoft Virtual Machine 3805 Series - Microsoft Internet Explorer 5.0.1 SP2 - Microsoft Internet Explorer 5.0.1 SP1 - Microsoft Internet Explorer 5.0.1 - Microsoft Internet Explorer 6.0 - Microsoft Internet Explorer 5.5 SP2 - Microsoft Internet Explorer 5.5 SP1 - Microsoft Internet Explorer 5.5 - Microsoft Internet Explorer 5.0 Microsoft Virtual Machine 3802 Series + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 4.0.1 + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.0 + Microsoft Internet Explorer 4.0 Microsoft Virtual Machine 3300 Series - Microsoft Internet Explorer 5.5 Microsoft Virtual Machine 3200 Series + Microsoft Internet Explorer 5.0.1 Microsoft Virtual Machine 3188 - Microsoft Internet Explorer 5.0 for Windows NT 4 - Microsoft Internet Explorer 5.0 for Windows 98 - Microsoft Internet Explorer 5.0 for Windows 95 - Microsoft Internet Explorer 5.0 for Windows 2000 - Microsoft Internet Explorer 4.0 for Windows NT 4 - Microsoft Internet Explorer 4.0 for Windows NT 3 - Microsoft Internet Explorer 4.0 for Windows 95 - Microsoft Internet Explorer 4.0 Microsoft Virtual Machine 3100 Series + Microsoft Internet Explorer 5.0 for Windows NT 4 + Microsoft Internet Explorer 5.0 for Windows 98 + Microsoft Internet Explorer 5.0 for Windows 95 + Microsoft Internet Explorer 5.0 for Windows 2000 Microsoft Virtual Machine 3000 Series + Microsoft Internet Explorer 5.0 for Windows NT 4 + Microsoft Internet Explorer 5.0 for Windows 98 + Microsoft Internet Explorer 5.0 for Windows 95 + Microsoft Internet Explorer 5.0 for Windows 2000 Microsoft Virtual Machine 2000 Series + Microsoft Internet Explorer 4.0 for Windows NT 4 + Microsoft Internet Explorer 4.0 for Windows NT 3 + Microsoft Internet Explorer 4.0 for Windows 95 + Microsoft Internet Explorer 4.0
Not Vulnerable:

Microsoft Virtual Machine Unauthorized ODBC Data Access Vulnerability

A vulnerability has been reported in a Java class that provides ODBC support. Reportedly, due to errors in security checking code, it is possible for an attacker to obtain unauthorized access to ODBC data sources of a victim system.

It may be possible for an attacker to make modifications to the ODBC data sources that may have serious security implications.

Microsoft Virtual Machine Unauthorized ODBC Data Access Vulnerability

Solution:
It has been reported that this issue is fixed by the patch detailed in Microsoft Security Bulletin MS02-052.

Microsoft Virtual Machine Unauthorized ODBC Data Access Vulnerability

References:

• Microsoft Security Bulletin MS02-052 (Microsoft)
  
• Windows Update (Microsoft)