FYI
Patch says reboot recommended, but I didn't get much choice on either
IIS 4 or IIS 5.
Jochem
-------- Original Message --------
===============================================================================
Security Advisory CERT-NL
===============================================================================
Author/Source : Teun Nijssen Index : S-02-111
Distribution : World Page : 1
Classification: External Version: 1
Subject : Microsoft Data Access Components Date :20-Nov-2002
===============================================================================
Microsoft security bulletin:
===============================================================================
Title: Buffer Overrun in Microsoft Data Access Components Could
Lead to Code Execution (Q329414)
Date: 20 November, 2002
Software: Microsoft Data Access Components (MDAC) 2.1
Microsoft Data Access Components (MDAC) 2.5
Microsoft Data Access Components (MDAC) 2.6
Microsoft Internet Explorer 5.01
Microsoft Internet Explorer 5.5
Microsoft Internet Explorer 6.0
Impact: Run code of attacker's choice
Max Risk: Critical
Bulletin: MS02-065
Microsoft encourages customers to review the Security Bulletins at:
http://www.microsoft.com/security/security_bulletins/ms02-065.asp
http://www.microsoft.com/technet/security/bulletin/MS02-065.asp.
===============================================================================
<snip>
Risk Rating:
============
- Internet systems: Critical
- Intranet systems: Critical
- Client systems: Critical
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription:
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
