Signature Detail

HTTP: ADODB.Connection File Installation Weakness

This signature detects attempts to exploit a known vulnerability in the ADODB.Connection ActiveX Object of Microsoft Internet Explorer (IE). IE 6.0 and earlier are vulnerable. Attackers can trick users into downloading a malicious VBScript and executing the script locally. A successful attack can enable attackers to overwrite a file on the local host.

Extended Description

Successful exploitation enables an attacker to install Trojan horses or backdoor programs on the local filesystem, including the Startup folder, which could lead to complete compromise of the target host.

References

• URL: http://www.securityfocus.com/archive/1/389023