Microsoft Commerce Server OWC Package Installer Buffer Overflow Vulnerability

Microsoft Commerce Server OWC Package Installer Buffer Overflow Vulnerability

Solution:
The patch provided by Microsoft is meant to prevent remote execution of the OWC package installer. It does not fix the buffer overflow vulnerability.

Microsoft has released a patch to address this vulnerability:

Microsoft Commerce Server 2000 SP2

Microsoft Q322273
http://download.microsoft.com/download/comserver/Patch/1.1/NT5/EN-US/Q 322273_EN.EXE

Microsoft Commerce Server 2000

Microsoft Q322273
http://download.microsoft.com/download/comserver/Patch/1.1/NT5/EN-US/Q 322273_EN.EXE