Microsoft JET Database Engine VBA Vulnerability

Bugtraq ID:	286
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	May 25 1999 12:00AM
Updated:	May 25 1999 12:00AM
Credit:	This vulnerability was published in the BUGTRAQ mailing list by Matthew Astley and Rain Forest Puppy <rfp@wiretrip.net>. Exploit posted to Bugtraq by Wanderley J. Abreu Junior <storm@unikey.com.br>.
Vulnerable:	Microsoft JET 3.51 + Microsoft Excel 95 + Microsoft Excel 95 + Microsoft Excel 97 + Microsoft Excel 97 Microsoft JET 3.5 + Microsoft Access 95 + Microsoft Access 95 + Microsoft Access 97 + Microsoft Access 97 Microsoft IIS 4.0 + Cisco Building Broadband Service Manager 5.0 + Cisco Building Broadband Service Manager 5.0 + Cisco Call Manager 3.0 + Cisco Call Manager 3.0 + Cisco Call Manager 2.0 + Cisco Call Manager 2.0 + Cisco Call Manager 1.0 + Cisco Call Manager 1.0 + Cisco ICS 7750 + Cisco ICS 7750 + Cisco IP/VC 3540 Video Rate Matching Module + Cisco IP/VC 3540 Video Rate Matching Module + Cisco Unity Server 2.4 + Cisco Unity Server 2.4 + Cisco Unity Server 2.3 + Cisco Unity Server 2.3 + Cisco Unity Server 2.2 + Cisco Unity Server 2.2 + Cisco Unity Server 2.0 + Cisco Unity Server 2.0 + Cisco uOne 4.0 + Cisco uOne 4.0 + Cisco uOne 3.0 + Cisco uOne 3.0 + Cisco uOne 2.0 + Cisco uOne 2.0 + Cisco uOne 1.0 + Cisco uOne 1.0 + Microsoft BackOffice 4.5 + Microsoft BackOffice 4.5 + Microsoft BackOffice 4.0 + Microsoft BackOffice 4.0 + Microsoft Windows NT 4.0 Option Pack + Microsoft Windows NT 4.0 Option Pack

Not Vulnerable:	Microsoft JET 4.0 SP1 Microsoft JET 4.0 + Microsoft Access 2000 + Microsoft Access 2000