NT IIS MDAC RDS Vulnerability

Bugtraq ID:	529
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Jul 19 1999 12:00AM
Updated:	Jul 19 1999 12:00AM
Credit:	Microsoft Security Bulletin MS98-004 released July 14, 1998, rereleased as MS99-025 on July 19, 1999. Additional information posted to NTBugtraq on July 19, 1999 by Greg Gonzalez <ghg@INTERCERVE.COM>. Additional information and exploit posted to Bugtraq on
Vulnerable:	Microsoft Site Server Commerce Edition 3.0 i386 - Microsoft BackOffice 4.5 - Microsoft BackOffice 4.5 + Microsoft BackOffice 4.0 + Microsoft Commercial Internet System 2.0 + Microsoft Site Server Commerce Edition 3.0 alpha - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP3 Microsoft MDAC 2.1 UPGRADE Microsoft MDAC 2.1 CLEAN Microsoft MDAC 2.0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Microsoft MDAC 1.5 + Microsoft Windows NT 4.0 + Microsoft Windows NT 4.0 Microsoft Index Server 2.0 + Microsoft IIS 4.0 + Microsoft IIS 4.0 Microsoft IIS 4.0 + Cisco Building Broadband Service Manager 5.0 + Cisco Building Broadband Service Manager 5.0 + Cisco Call Manager 3.0 + Cisco Call Manager 3.0 + Cisco Call Manager 2.0 + Cisco Call Manager 2.0 + Cisco Call Manager 1.0 + Cisco Call Manager 1.0 + Cisco ICS 7750 + Cisco ICS 7750 + Cisco IP/VC 3540 Video Rate Matching Module + Cisco IP/VC 3540 Video Rate Matching Module + Cisco Unity Server 2.4 + Cisco Unity Server 2.4 + Cisco Unity Server 2.3 + Cisco Unity Server 2.3 + Cisco Unity Server 2.2 + Cisco Unity Server 2.2 + Cisco Unity Server 2.0 + Cisco Unity Server 2.0 + Cisco uOne 4.0 + Cisco uOne 4.0 + Cisco uOne 3.0 + Cisco uOne 3.0 + Cisco uOne 2.0 + Cisco uOne 2.0 + Cisco uOne 1.0 + Cisco uOne 1.0 + Microsoft BackOffice 4.5 + Microsoft BackOffice 4.5 + Microsoft BackOffice 4.0 + Microsoft BackOffice 4.0 + Microsoft Windows NT 4.0 Option Pack + Microsoft Windows NT 4.0 Option Pack Microsoft IIS 3.0 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0

Not Vulnerable: