MS04-003: MDAC Buffer Overflow (832483)

medium Nessus Plugin ID 11990

Synopsis

Arbitrary code can be executed on the remote host through MDAC server.

Description

The remote Microsoft Data Access Component (MDAC) server is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host, provided he can simulate responses from a SQL server.

To exploit this flaw, an attacker would need to wait for a host running a vulnerable MDAC implementation to send a broadcast query. He would then need to send a malicious packet pretending to come from a SQL server.

Solution

Microsoft has released a set of patches for Windows 2000, XP and 2003.

See Also

https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2004/ms04-003

Plugin Details

Severity: Medium

ID: 11990

File Name: smb_nt_ms04-003.nasl

Version: 1.47

Type: local

Agent: windows

Published: 1/13/2004

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:A/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:data_access_components

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 1/13/2004

Vulnerability Publication Date: 1/13/2004

Reference Information

CVE: CVE-2003-0903

BID: 9407

CWE: 119

MSFT: MS04-003

MSKB: 832483