Signature Detail
Short Name |
HTTP:STC:CANVAS-BABYBOTTLE-GZIP |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Canvas Babybottle gzip |
Release Date |
2006/05/02 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Canvas Babybottle gzip
This signature detects attempts to exploit a known vulnerability using an attack from the Canvas framework known as babybottle. A successful attack can lead to arbitrary remote code execution. This exploit is related to vulnerability MS06-014.
Extended Description
The Microsoft MDAC RDS.Dataspace ActiveX control is vulnerable to remote code execution. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page.
Affected Products
- Hitachi DA Broker for ODBC 01-00
- Hitachi DA Broker for ODBC 01-02
- Hitachi DBPARTNER2 Client 01-00
- Hitachi DBPARTNER2 Client 01-05
- Hitachi DBPARTNER2 Client 01-12
- Hitachi DBPARTNER ODBC 01-00
- Hitachi DBPARTNER ODBC 01-03
- Hitachi DBPARTNER ODBC 01-06
- Hitachi DBPARTNER ODBC 01-11
- Hitachi HITSENSER5 01-00
- Hitachi HITSENSER5 01-10
- Hitachi HITSENSER5 02-80
- Microsoft Data Access Components (MDAC) 2.5 SP3
- Microsoft Data Access Components (MDAC) 2.7
- Microsoft Data Access Components (MDAC) 2.7 SP1
- Microsoft Data Access Components (MDAC) 2.8
- Microsoft Data Access Components (MDAC) 2.8 SP1
- Microsoft Data Access Components (MDAC) 2.8 SP2
References
- BugTraq: 17462
- CVE: CVE-2006-0003
- URL: http://www.microsoft.com/technet/security/Bulletin/MS06-014.mspx