Scott,
Doesn't Access 97 still use Jet 3.5 even if Jet 4.0 is installed? If
true, this means that these people running IMail with Access 97 as their
back end database would still be vulnerable. Correct me if I've got this
wrong. Thanks for the reply.
James Strompolis
Aleph Consultants, Inc.
[EMAIL PROTECTED], http://www.ribs.com
----- Original Message -----
From: Scott R. Chrestman <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 27, 1999 11:39 AM
Subject: RE: [IMail Forum] ODBC security flaw with NT IIS
> I have been working with Rain Forest Puppy researching this....
>
> It looks like you will only be affected if you are running an MDAC older
> than 2.0. The Jet Database Engine 3.51 is the engine that had the
> exploitable vulnerability. Jet Database Engine 4.0 corrects this. RFP
> should be releasing an update to Bugtraq in the next day or so.
>
> I have written a test exploit .asp script that will test to see if you are
> vulnerable. You can e-mail me directly for a copy of the test script.
>
> Scott R. Chrestman
> Vice President
> Netropolis Communications Corp.
> E-Mail: [EMAIL PROTECTED]
> http://www.netropolis.net
>
>
