荳芽ｼｪ��BUGRAQ-JP邂｡逅�ｺｺ縺ｧ縺吶��
縺頑妙繧奇ｼ壹％縺ｮ繝｡繝�そ繝ｼ繧ｸ縺ｯ'---cut here---'莉･荳九ｒ蜈ｨ譁�軸霈峨�荳翫�∫┌蛻ｶ髯舌↓驟榊ｸ�庄閭ｽ縺ｧ縺吶��
----------------------cut here------------------------------------------
rain forest puppy 縺ｮ險ｱ蜿ｯ繧貞ｾ励※莉･荳九ｒ鄙ｻ險ｳ縺励�繧ｹ繝医＠縺ｾ縺吶�らｿｻ險ｳ閠�ｼ哢obuo Miwa BUGTRAQ-JP moderator
--- Advisory RFP9907 ----------------------------- rfp.labs -----------
縲�縺ゅ↑縺溘�√≠縺ｪ縺溘�繧ｵ繝ｼ繝舌�ヽDS縲√◎縺励※螟壹￥縺ｮ繧ｹ繧ｯ繝ｪ繝励ヨ繧ｭ繝�ぅ縺ｸ
縲�縲�縲�縲�縲�縲�縲�縲�縲�縲�縲�..RDS繧｢繧ｿ繝�け縺九ｉ螳医ｋ縺ｫ縺ｯ..
------------------------------ rain forest puppy / [email protected] ---
蜀�ｮｹ:
- 1. 蝠城｡檎せ
- 2. 隗｣豎ｺ遲�
- 3. 縺�ｍ縺�ｍ縺ｪ迥ｶ豕�
- 4. msadc.pl謾ｻ謦��逋ｺ隕�
- 5. 譛�蠕後↓
- 6. 蜿り��
-----------------------------------------------------------------------
縺薙ｌ繧定ｪｭ繧�譎る俣縺檎┌縺��縺ｧ縺吶°��
縺昴�蝣ｴ蜷医�縲∽ｻ･荳九�繝輔ぃ繧､繝ｫ繧貞炎髯､縺励※縺上□縺輔＞縲ゑｼ�
?:\Program Files\Common Files\System\Msadc\msadcs.dll
蜃ｺ譚･繧九□縺第掠縺丞炎髯､縺励�∝撫鬘後□繧峨¢縺ｮRDS讖溯�繧堤┌蜉ｹ縺ｫ縺励※縺上□縺輔＞縲ゅｂ縺励�ヽDS繧剃ｽｿ縺�◆縺代ｌ縺ｰ莉･荳九ｒ繧医￥隱ｭ繧薙□譁ｹ縺後＞縺�〒縺吶��
-----------------------------------------------------------------------
----[ 1. 蝠城｡檎せ
.gov,.mil 縺昴＠縺ｦ microsoft.com 縺ｧ縺輔∴繧８eb繧ｵ繝ｼ繝舌↓陲ｫ螳ｳ繧貞女縺代∪縺励◆縲ゅ％繧後�RDS縺悟次蝗�縺ｧ縺吶�ゆｻ翫�∵�繧峨°縺ｪ縺薙→縺ｯ縲！IS 4.0縺ｯ螟夜Κ縺九ｉ讌ｵ繧√※蜊ｱ髯ｺ縺ｪ迥ｶ豕√↓縺ゅｋ縺ｨ縺�≧縺薙→縺ｧ縺吶�ゅ＠縺九＠縲｀icrosoft縺ｯ縺ｲ縺ｨ縺､縺ｧ繧ゅ�縺溘▽縺ｧ繧ゅ↑縺上�∽ｸ峨▽縺ｮ驕輔≧繝代ャ繝√ｒ繝ｪ繝ｪ繝ｼ繧ｹ縺励∪縺励◆縲よ峩縺ｫ縲∝酔縺倥い繝峨ヰ繧､繧ｶ繝ｪ繧剃ｽ募ｺｦ繧ゅΜ繝ｪ繝ｼ繧ｹ縺励∪縺励◆縲ゅ◎縺励※縲∵悴縺�縺ｫ蝠城｡後�隗｣豎ｺ縺輔ｌ縺ｦ縺�∪縺帙ｓ縲�
縺昴％縺ｧ謌代���蜍牙ｼｷ縺励↑縺代ｌ縺ｰ縺�¢縺ｾ縺帙ｓ縲ょｯｾ遲悶�譁ｹ豕輔�菴暮�壹ｊ繧り��∴繧峨ｌ縺ｾ縺吶�らｧ√′RDS縺ｫ縺､縺�※縺ｮExplot繧ｳ繝ｼ繝峨ｒ譖ｸ縺�※縺九ｉ縲∵峩縺ｫ繧医￥隱ｿ縺ｹ縺ｦ縺ｿ縺溘％縺ｨ繧偵�√％縺ｮ繧｢繝峨ヰ繧､繧ｶ繝ｪ繧呈署萓帙☆繧九％縺ｨ縺ｫ繧医▲縺ｦ縲√∩縺ｪ縺輔ｓ縺ｨ遏･隴倥�蜈ｱ譛峨ｒ縺励◆縺�→諤昴＞縺ｾ縺吶��
蝠城｡後�蝓ｺ譛ｬ逧�↓縺ｯ Jet 3.5 縺祁BA縺ｮ繧ｷ繧ｧ繝ｫ讖溯�繧貞他縺ｳ蜃ｺ縺吶％縺ｨ縺悟�譚･繧九％縺ｨ縺ｫ縺ゅｊ縺ｾ縺吶�ゑｼ医％繧後�莉･荳九�URL縺ｫ縺ゅｋRFP9901:NT ODBC remote vulnerabilities 縺ｫ譖ｸ縺九ｌ縺ｦ縺�∪縺吶�ゑｼ�
https://wiretrip.net/rfp/p/doc.asp?id=3&iface=2
MDAC 1.5縺後う繝ｳ繧ｹ繝医�繝ｫ縺輔ｌ縺溘ョ繝輔か繝ｫ繝郁ｨｭ螳壹�IIS 4.0縺後≠縺｣縺溘→縺励∪縺吶�ゅ％繧後↓縺ｯ縲√Μ繝｢繝ｼ繝医°繧姥eb繧帝�壹＠縺ｦODBC縺ｫ繧｢繧ｯ繧ｻ繧ｹ縺吶ｋ縺溘ａ縺ｮRDS縺悟性縺ｾ繧後※縺翫ｊ/msadc/msadcs.dll縺ｨ縺�≧DLL繧帝�壹＠縺ｦ陦後ｏ繧後∪縺吶�ゑｼ医％繧後�縲∽ｻ･荳九�URL縺ｫ縺ゅｋ RFP9902: RDS/IIS vulnerability and exploit縺ｫ譖ｸ縺九ｌ縺ｦ縺�∪縺吶�ゑｼ�
https://wiretrip.net/rfp/p/doc.asp?id=1&iface=2
縺薙％縺ｧ莠後▽縺ｮ蝠城｡後′縺ゅｋ縺薙→縺悟�縺九ｊ縺ｾ縺吶�よ峩縺ｫ隨ｬ荳峨�蝠城｡檎せ縺後≠繧翫∪縺吶�ゅ◎繧後�(RFP9902縺ｫ譖ｸ縺九ｌ縺ｦ縺�ｋ)Microsoft縺ｮ謗ｨ螂ｨ縺励※縺�ｋ蟇ｾ遲悶ｒ繝舌う繝代せ縺吶ｋ縺薙→縺ｮ蜃ｺ譚･繧� VbBusObj 縺ｨ縺�≧繧ｵ繝ｳ繝励Ν繧ｳ繝ｳ繝昴�繝阪Φ繝医ｒ蜷ｫ繧�縲ヽDS SDK繝代ャ繧ｱ繝ｼ繧ｸ縺ｫ繧医▲縺ｦ繧､繝ｳ繧ｹ繝医�繝ｫ縺輔ｌ繧九し繝ｳ繝励Ν繝壹�繧ｸ縺ｫ縺ゅｊ縺ｾ縺吶��

----[ 2. 隗｣豎ｺ遲�
蝠城｡後�螟壹￥縺ｮ蟇ｾ遲悶′縺ゅｋ縺薙→縺ｨ縲∽ｽｿ逕ｨ譁ｹ豕輔↓繧医▲縺ｦ螟壹￥縺ｮ邨�∩蜷医ｏ縺帙′縺ゅｋ縺薙→縺ｧ縺吶�ゅ≠縺ｪ縺溘′www.microsoft.com縺昴�莉悶°繧牙�謇九☆繧九％縺ｨ縺悟�譚･縺ｪ縺九▲縺溷�ｴ蜷医�轤ｺ縺ｫi386逕ｨ縺ｮ縺ｿ縺ｮ蜈ｨ縺ｦ縺ｮ驥崎ｦ√↑繝舌う繝翫Μ繝輔ぃ繧､繝ｫ(闍ｱ隱樒沿縺ｮ縺ｿ)繧偵Α繝ｩ繝ｼ縺励※縺翫″縺ｾ縺励◆縲ゆｻ･荳九↓蜃ｺ譚･繧九□縺題ｩｳ邏ｰ縺ｫ隱ｬ譏弱ｒ縺励※縺�″縺溘＞縺ｨ諤昴＞縺ｾ縺吶��

-蟇ｾ遲� #1:
cmd.exe 繧堤ｧｻ蜍輔☆繧� (ULG 縺梧耳螂ｨ縺吶ｋ蟇ｾ遲匁婿豕�)
http://www.aviary-mag.com/News/Powerful_Exploit/ULG_Fix/ulg_fix.html
谿句ｿｵ縺ｪ縺後ｉ縺薙�蟇ｾ遲悶↓縺ｯ蝠城｡後′縺ゅｊ縺ｾ縺吶�Ｎdac.pl 縺ｯ cmd.exe 繧剃ｽｿ逕ｨ縺吶ｋ繧医≧縺ｫ繝上�繝峨さ繝ｼ繝�ぅ繝ｳ繧ｰ縺輔ｌ縺ｦ縺�∪縺呻ｼ亥�ｴ蜷医↓繧医▲縺ｦ縺ｯcommand.com�峨��
縲�縲�縲�縲�縲�縲�縲�CMD.EXE 縺ｯ 謾ｻ謦�ヤ繝ｼ繝ｫ縺ｫ縺ｯ蠢��医〒縺ｯ縺ゅｊ縺ｾ縺帙ｓ縲�
遘√�縲√さ繝ｳ繝代メ繝薙Μ繝�ぅ繧呈戟縺溘○繧九◆繧√↓縺薙�譁ｹ豕輔�菴ｿ縺｣縺ｦ縺�∪縺吶′縲∝挨縺ｮ譁ｹ豕輔〒謾ｻ謦�ｒ陦後≧縺薙→縺悟�譚･縺ｾ縺吶�ゅ≠縺ｪ縺溯�霄ｫ縺ｧ隧ｦ縺吶％縺ｨ縺後〒縺阪∪縺吶�Ｎdac.pl 繧� 'cmd /c'縺ｨ縺�≧譁�ｭ怜�繧貞他縺ｳ蜃ｺ縺帙↑縺�ｈ縺�↓邱ｨ髮�＠縺ｦ縺ｿ縺ｦ縺上□縺輔＞縲ゅ≠縺ｪ縺溘�縺昴ｌ縺ｧ繧ゅ��'rdisk'縺ｮ繧医≧縺ｪ螳溯｡後ヵ繧｡繧､繝ｫ繧剃ｽｿ逕ｨ縺吶ｋ縺薙→縺悟�譚･縺ｾ縺吶�りｦ壹∴縺ｦ縺翫＞縺ｦ谺ｲ縺励＞縺薙→縺ｯ縲…md.exe繧剃ｽｿ逕ｨ縺励↑縺��ｴ蜷医�縲�'copy'縺ｮ繧医≧縺ｪ繧ｳ繝槭Φ繝峨ｒ菴ｿ縺�％縺ｨ縺ｯ蜃ｺ譚･縺ｪ縺上↑繧九→縺�≧縺薙→縺ｧ縺吶�ゅｂ縺｡繧阪ｓ縲√ヵ繧｡繧､繝ｫ縺ｮ繝ｪ繝�繧､繝ｬ繧ｯ繧ｷ繝ｧ繝ｳ繧ゆｽｿ縺医↑縺上↑繧翫∪縺吶�ゅ％繧後ｉ縺ｯ縲…md.exe縺ｧ縺ｮ縺ｿ謠蝉ｾ帙＆繧後ｋ讖溯�縺�縺九ｉ縺ｧ縺吶��
譖ｴ縺ｫ遏･繧峨↑縺代ｌ縺ｰ縺ｪ繧峨↑縺�％縺ｨ縺ｯ縲…md.exe/command.com繧堤ｧｻ蜍輔＠縺ｦ縺励∪縺�％縺ｨ縺ｯ縺昴�蝣ｴ縺励�縺弱�蟇ｾ遲悶〒縺励°縺ｪ縺�→縲√→縺�≧縺薙→縺ｧ縺吶�ゆｾｵ蜈･閠�′遘ｻ蜍募�繧堤衍縺｣縺ｦ縺励∪縺医�蠖ｼ遲峨�縺昴ｌ繧剃ｽｿ逕ｨ縺吶ｋ縺薙→縺悟�譚･縺ｦ縺励∪縺�°繧峨〒縺吶�ゅ◎縺励※縲ヾystem 縺九ｉ縺ｮ繧｢繧ｯ繧ｻ繧ｹ縺悟�譚･縺ｪ縺�ｈ縺�↓讓ｩ髯舌ｒ譖ｸ縺肴鋤縺医※縺励∪縺�％縺ｨ繧ゅ＞縺�婿豕輔〒縺ｯ縺ゅｊ縺ｾ縺帙ｓ縲よ里縺ｫ縺昴�莉悶�繝代ャ繝√′縺ゅｋ縺ｮ縺ｧ縺昴■繧峨ｒ菴ｿ縺｣縺滓婿縺後＞縺�〒縺吶��

-蟇ｾ遲� #2:
MDAC 1.5 縺九ｉ 2.0 縺ｸ繧｢繝��繧ｰ繝ｬ繝ｼ繝峨☆繧� MDAC 2.0 繧� Jet 3.5 縺九ｉ Jet 3.52 縺ｸ螟画峩縺励∪縺吶��

縺薙ｌ縺ｯ縲〃BA shell() 縺ｫ蟇ｾ縺吶ｋ謾ｻ謦�↓縺ｯ蜉ｹ譫懊′縺ゅｊ縺ｾ縺帙ｓ縲ゅ◎縺励※縲√ョ繝輔か繝ｫ繝医〒縺ｯ RDS 縺ｯ辟｡蜉ｹ縺ｫ縺ｯ蜃ｺ譚･縺ｾ縺帙ｓ縲� * 繝�ヵ繧ｩ繝ｫ繝医�Jet繧ｨ繝ｳ繧ｸ繝ｳ繧�3.52縺ｫ縺吶ｋ縺薙→縺ｯ縲…ustom handler support縺ｫRDS * 縺ｫ蛹ｿ蜷阪い繧ｯ繧ｻ繧ｹ繧堤ｦ∵ｭ｢縺輔○繧九◆繧√↓縲｀icrosoft.Jet.OLEDB.3.51*繝励Ο繝舌う繝� * 繧剃ｽ懈�縺吶ｋ縺薙→繧定ｨｱ蜿ｯ縺励∪縺吶�� 縺励°縺励�√％繧後ｂ縺薙�縺ｾ縺ｾ縺ｧ縺ｯ濶ｯ縺�婿豕輔〒縺ｯ縺ゅｊ縺ｾ縺帙ｓ縲�
縺ゅ↑縺溘�蟆代↑縺上→繧ゅ�� custom handler support繧呈怏蜉ｹ縺ｫ縺励↑縺代ｌ縺ｰ縺�¢縺ｾ縺帙ｓ縲ゅ％繧後�縲∽ｻ･荳九�繝ｬ繧ｸ繧ｹ繝医Μ繧ｭ繝ｼ縺ｧ蜿ｯ閭ｽ縺ｧ縺吶��
HKEY_LOCAL_MACHINE\Software\Microsoft\DataFactory\HandlerInfo\ Keyname:
HandlerRequired Value: DWORD:1 (safe) or 0 (unsafe)
縺薙�蛟､繧抵ｼ代↓縺吶ｋ縺ｹ縺阪〒縺吶�ゅ％繧後�譖ｴ縺ｫMicrosoft縺九ｉ謠蝉ｾ帙＆繧後※縺�ｋHotfix縺ｮ 'handsafe.exe/.reg'縺ｧ陦後ｏ繧後※縺�ｋ縺薙→縺ｧ縺吶�ゅ％繧後�縲∽ｻ･荳九�URL縺ｫ縺ゅｊ縺ｾ縺吶��
https://wiretrip.net/rfp/bins/msadc/handsafe.exe
螳溯｡後☆繧九→縺阪↓縺ｯ縲”andsafe.rem縺御ｽｿ逕ｨ縺輔ｌ縺ｾ縺吶�Ｉandsafe.reg縺ｫ蜷榊燕繧貞､画峩縺励※縺九ｉ繝�繝悶Ν繧ｯ繝ｪ繝�け縺励※繝ｬ繧ｸ繧ｹ繝医Μ縺ｫ譖ｸ縺崎ｾｼ繧�縺薙→縺悟�譚･縺ｾ縺吶��
縺薙�繧医≧縺ｫ縺励※RDS謾ｻ謦�°繧蛾亟蠕｡縺励ｈ縺�→縺励※繧ゅ�・xcel,Word縺昴＠縺ｦAccess繝輔ぃ繧､繝ｫ縺ｮ繝医Ο繧､縺ｮ譛ｨ鬥ｬ繧貞性繧薙□ODBC謾ｻ謦�↓縺ｯ蠑ｱ轤ｹ繧呈戟縺｣縺溘∪縺ｾ縺ｧ縺吶�ゅ▽縺ｾ繧翫�√％繧後□縺代〒縺ｯ蜊∝�縺ｧ縺ｯ縺ｪ縺��√→縺�≧縺薙→縺ｧ縺吶��

-蟇ｾ遲� #3:
MDAC 1.5 繧� 2.1 莉･髯阪↓繧｢繝��繧ｰ繝ｬ繝ｼ繝峨☆繧� MDAC 2.1繧谷et 3.5 縺九ｉ 蠑ｱ轤ｹ縺ｮ辟｡縺Йet 4.0繧ｨ繝ｳ繧ｸ繝ｳ縺ｫ螟画峩縺励∪縺吶��

縺励°縺励�� 3.5 縺ｨ 4.0 縺ｫ縺ｯ莠呈鋤諤ｧ縺ｮ蝠城｡後′縺ゅｊ縺ｾ縺吶�ょ､壹￥縺ｮ繝ｦ繝ｼ繧ｶ縺後％縺ｮ莠呈鋤諤ｧ縺ｮ蝠城｡後↓繧医▲縺ｦ繧｢繝��繧ｰ繝ｬ繝ｼ繝峨ｒ縺励◆縺後ｉ縺ｪ縺�〒縺励ｇ縺��� * 繝�ヵ繧ｩ繝ｫ繝医� Jet繧ｨ繝ｳ繧ｸ繝ｳ繧貞ｼｱ轤ｹ縺ｮ辟｡縺�4.0縺ｫ螟画峩縺吶ｋ縺薙→縺ｯ縲∝諺蜷抗DS縺ｮ繧｢ * 繧ｯ繧ｻ繧ｹ繧堤ｦ∵ｭ｢縺吶ｋ縺溘ａ縺ｫ custom handler support 繧定ｨｱ蜿ｯ縺励∪縺吶��
縺励°縺励↑縺後ｉ縲…ustom handler縺ｯ繝�ヵ繧ｩ繝ｫ繝医〒縺ｯ譛牙柑縺ｫ縺輔ｌ縺ｦ縺�∪縺帙ｓ縲ゅ≠縺ｪ縺溘�縲∽ｸ願ｨ倥�HandlerRequired繝ｬ繧ｸ繧ｹ繝医Μ繧ｭ繝ｼ縺ｮ蛟､繧抵ｼ代↓繧ｻ繝�ヨ縺励↑縺代ｌ縺ｰ縺�¢縺ｾ縺帙ｓ縲ゅ◎縺ｮ轤ｺ縺ｫ縺ｯ縲〉egedit繧剃ｽｿ逕ｨ縺吶ｋ縺吃andsafe.exe/.reg fix繧貞ｮ溯｡後＠縺ｾ縺吶��

-蟇ｾ遲� #4:
MDAC 1.5 繧� 2.0 縺九ｉ 2.1 縺ｸ繧｢繝��繧ｰ繝ｬ繝ｼ繝峨☆繧�

繧ゅ＠縺ゅ↑縺溘′濶ｯ縺�ｮ｡逅���〒縺ゅｋ縺ｪ繧峨�√≠縺ｪ縺溘�蟶ｸ縺ｫ繧ｽ繝輔ヨ繧ｦ繧ｧ繧｢繧偵い繝��繧ｰ繝ｬ繝ｼ繝峨＠邯壹¢縺ｦ縺�ｋ縺ｧ縺励ｇ縺��ゅｂ縺励◎縺�＠縺ｦ縺�ｋ縺ｮ縺ｪ繧峨�∝�縺ｦ縺ｮ繧｢繝��繧ｰ繝ｬ繝ｼ繝峨�驕鍋ｨ九ｒ騾壹▲縺ｦ縺�ｋ莠九〒縺励ｇ縺���2.1 縺ｫ逶ｴ謗･繧｢繝��繧ｰ繝ｬ繝ｼ繝峨☆繧九％縺ｨ縺ｫ縺ｯ蝠城｡後′縺ゅｊ縺ｾ縺呻ｼ井ｸ願ｨ倥�繧医≧縺ｫ'HandlerRequired'繝ｬ繧ｸ繧ｹ繝医Μ繧ｭ繝ｼ繧呈怏蜉ｹ縺ｫ縺励↑縺代ｌ縺ｰ縺�¢縺ｾ縺帙ｓ�峨��
2.1縺ｯ縲√ョ繝輔か繝ｫ繝医〒縺ｯ(蠑ｱ轤ｹ縺ｮ辟｡縺�)Jet 4.0繧ｨ繝ｳ繧ｸ繝ｳ繧剃ｽｿ逕ｨ縺励※縺�∪縺吶�ゅ＠縺九＠縺ｪ縺後ｉ縲�2.0 縺ｸ縺ｮ繧｢繝��繧ｰ繝ｬ繝ｼ繝峨ｒ陦後ｏ縺ｪ縺九▲縺溷�ｴ蜷医�縲｀icrosoft.Jet.OLEDB.3.51繝励Ο繝舌う繝�繧剃ｽｿ逕ｨ縺励※縺�∪縺吶�ゅ％繧後�縲ヽDS繧貞性繧√◆繧｢繝励Μ繧ｱ繝ｼ繧ｷ繝ｧ繝ｳ縺ｯ蜿､縺�(蠑ｱ轤ｹ縺ｮ縺ゅｋ)Jet 3.51繧ｨ繝ｳ繧ｸ繝ｳ繧貞他縺ｳ蜃ｺ縺励※縺�ｋ縺薙→繧呈э蜻ｳ縺励∪縺吶�� 縺ゅ↑縺溘�縺薙ｌ繧峨�蜿､縺�ｨｭ螳壹ｒ蜑企勁縺吶ｋ蠢�ｦ√′縺ゅｊ縺ｾ縺吶�ゅ�縺ｨ縺､縺ｮ譁ｹ豕輔�縲∽ｻ･荳九�繝ｬ繧ｸ繧ｹ繝医Μ繧ｭ繝ｼ縺ｧ陦後∴縺ｾ縺吶��
HKEY_CLASSES_ROOT\Microsoft.Jet.OLEDB.3.51
HKEY_CLASSES_ROOT\Microsoft.Jet.OLEDB.3.51Errors
縺励°縺励↑縺後ｉ縲√≠縺ｪ縺溘� 4.0繧ｨ繝ｳ繧ｸ繝ｳ縺ｮ莠呈鋤諤ｧ縺ｮ蝠城｡後↓逶ｴ髱｢縺励◆縺ｾ縺ｾ縺ｧ縺吶�ょｾ薙▲縺ｦ縲√％繧後�邏�譎ｴ繧峨＠縺�ｧ｣豎ｺ遲悶〒縺ｯ縺ゅｊ縺ｾ縺帙ｓ縲�

-蟇ｾ遲� #5:
JetCopkg.exe (MS99-030)繧偵う繝ｳ繧ｹ繝医�繝ｫ縺吶ｋ縲�

JetCopkg.exe 縺ｯ 'sandbox'縺ｫ莉｣陦ｨ縺輔ｌ繧句ｮ牙�縺ｪ讖溯�繧呈戟縺｣縺ｦ縺�ｋ縲∵判謦�＆繧後↑縺�ｿｮ蠕ｩ繧呈命縺輔ｌ縺� Jet 3.5繧ｨ繝ｳ繧ｸ繝ｳ縺ｧ縺吶�ゅ％縺ｮ螳牙�縺ｪ讖溯�縺ｯ縲∽ｻ･荳九�繝ｬ繧ｸ繧ｹ繝医Μ繧ｭ繝ｼ縺ｫ繧医▲縺ｦ蛻ｶ蠕｡縺輔ｌ縺ｦ縺�∪縺吶��
HKEY_LOCAL_MACHINE\Software\Microsoft\Jet\3.5\engines\SandboxMode
縺昴ｌ縺槭ｌ縺ｮ蛟､縺ｯ莉･荳九�諢丞袖繧呈戟縺｡縺ｾ縺�:
0 辟｡蜉ｹ
1 繧｢繧ｯ繧ｻ繧ｹ縺ｮ縺ｿ繧呈怏蜉ｹ縺ｫ縺吶ｋ, 縺昴ｌ莉･螟悶�辟｡蜉ｹ
2 繧｢繧ｯ繧ｻ繧ｹ縺ｮ縺ｿ繧堤┌蜉ｹ縺ｫ縺吶ｋ縲√◎繧御ｻ･螟悶�譛牙柑�医ョ繝輔か繝ｫ繝茨ｼ�
3 蜈ｨ縺ｦ譛牙柑
(Note 1: '譛牙柑'縺ｯ Microsoft Access 縺九ｉ蛻ｩ逕ｨ縺ｧ縺阪ｋ縺ｨ縺�≧諢丞袖縺ｧ縺�)
(Note 2: 縺薙ｌ繧峨�莉･荳九�URL縺ｫ蜈ｨ縺ｦ險倩ｿｰ縺輔ｌ縺ｦ縺�∪縺�:
http://support.microsoft.com/support/kb/articles/q239/1/04.asp)
(Note 3: 縺薙�繧ｭ繝ｼ縺ｫ險ｭ螳壹＆繧後※縺�ｋ繝�ヵ繧ｩ繝ｫ繝医�繝代�繝溘ャ繧ｷ繝ｧ繝ｳ縺ｯ螳牙�縺ｧ縺ｯ縺ゅｊ縺ｾ縺帙ｓ�� 縺ゅ↑縺溘�'Authenticated Users'縺九ｉ'Read Only'縺ｫ螟画峩縺吶ｋ縺ｹ縺阪〒縺吶�ゅ％縺ｮ繝�ヵ繧ｩ繝ｫ繝医�險ｭ螳壹↓縺翫¢繧句些髯ｺ諤ｧ縺ｫ縺､縺�※縺ｯ縲・ric Shultze縺檎ｧ√�繧ｵ繧､繝医↓繝昴せ縺ｨ縺励※縺上ｌ縺滉ｻ･荳九�URL繧貞盾辣ｧ荳九＆縺��ゑｼ�
https://wiretrip.net/rfp/p/doc.asp?id=11&iface=2
荳願ｨ倥�蛟､繧� 2 縺� 3 縺ｫ縺励◆蝣ｴ蜷医�螳牙�縺ｧ縺吶�ゅ％繧後�驕ｩ蛻�↑謗ｨ螂ｨ縺輔ｌ繧区婿豕輔〒縺吶��
Jet 3.5繧ｨ繝ｳ繧ｸ繝ｳ繧剃ｽｿ逕ｨ縺励※縺�ｋ縺ｮ縺ｧ莠呈鋤諤ｧ縺ｮ蝠城｡後�縺ゅｊ縺ｾ縺帙ｓ縲ゅ＠縺九＠縲√％繧後�RDS繧堤┌蜉ｹ縺ｫ縺ｯ縺励※縺�∪縺帙ｓ縲よ判謦����縺ゅ↑縺溘�繝��繧ｿ繝吶�繧ｹ繝ｻ繝ｪ繧ｽ繝ｼ繧ｹ縺ｫ蛹ｿ蜷阪い繧ｯ繧ｻ繧ｹ縺ｧ縺阪∪縺吶�ゅ≠縺ｪ縺溘�繝��繧ｿ繧偵ａ縺｡繧�￥縺｡繧�↓縺吶ｋ縺薙→繧ょ�譚･縺ｾ縺吶��
縺ゅ↑縺溘�蟇ｾ遲悶′蠢�ｦ√〒縺吶�らｧ√�RDS繧堤┌蜉ｹ縺ｫ縺吶ｋ縺�(荳玖ｨ伜盾辣ｧ)縲｀DAC 2.0縺ｫ繧｢繝��繧ｰ繝ｬ繝ｼ繝峨☆繧九％縺ｨ繧呈耳螂ｨ縺励∪縺�(縺励°縺励�｀DAC 2.0繧呈怙蛻昴↓繧｢繝��繧ｰ繝ｬ繝ｼ繝峨＠縺ｦ縺九ｉ縲∵ｬ｡縺ｫ JetCopkg 繧偵う繝ｳ繧ｹ繝医�繝ｫ縺励※縺上□縺輔＞)縲�MDAC 2.0 縺ｫ繧｢繝��繧ｰ繝ｬ繝ｼ繝峨☆繧九％縺ｨ縺ｫ繧医▲縺ｦ縲∝諺蜷阪い繧ｯ繧ｻ繧ｹ繧堤┌蜉ｹ縺ｫ蜃ｺ譚･繧九ワ繝ｳ繝峨Λ縺ｮ蛻ｶ蠕｡縺悟�譚･繧九ｈ縺�↓縺ｪ繧翫∪縺吶��

-蟇ｾ遲� #6:

RDS 縺ｮ蜑企勁/辟｡蜉ｹ

縺薙ｌ縺ｯ縲∽ｸ願ｨ倥�JetCopkg縺ｨ菴ｵ縺帙※陦後≧蝣ｴ蜷医↓荳�逡ｪ濶ｯ縺�婿豕輔〒縺吶�ゅｂ縺励≠縺ｪ縺溘′菴輔ｉ縺九�逅�罰(Y2K蟇ｾ遲悶�轤ｺ縺ｮ繧ｷ繧ｹ繝�Β螟画峩遖∵ｭ｢)縺ｧ繧ｷ繧ｹ繝�Β繧貞､画峩縺吶ｋ繧医≧縺ｪ繧､繝ｳ繧ｹ繝医�繝ｫ縺悟�譚･縺ｪ縺��ｴ蜷医�縲√≠縺ｪ縺溘�RDS繧堤┌蜉ｹ縺ｫ縺吶ｋ縺薙→縺ｫ繧医▲縺ｦ縲∝ｰ代↑縺上→繧ゅΜ繝｢繝ｼ繝医°繧峨�謾ｻ謦��蜊ｱ髯ｺ諤ｧ繧呈ｸ帙ｉ縺吶％縺ｨ縺悟�譚･縺ｾ縺吶�ゅ≠縺ｪ縺溘�縺薙ｌ繧定穀縺｣縺ｽ縺�ｄ繧頑婿縺ｧ縺吶′縲∽ｻ･荳九�繝輔ぃ繧､繝ｫ繧貞炎髯､縺吶ｋ縺薙→縺ｫ繧医▲縺ｦ蜿ｯ閭ｽ縺ｫ縺ｪ繧翫∪縺吶��
?:\Program Files\Common Files\System\Msadc\msadcs.dll
縺薙ｌ縺ｯ縲ヽDS繧､繝ｳ繧ｿ繝ｼ繝輔ぉ繝ｼ繧ｹ繧呈署萓帙☆繧汽LL縺ｧ縺吶�ゅ＠縺九＠縲∽ｻ･荳九�繧医≧縺ｪ謇矩��〒縺阪■繧薙→蟇ｾ遲悶ｒ陦後≧縺薙→繧定岬繧√∪縺吶�� * IIS縺ｫ繧医▲縺ｦ繝槭ャ繝斐Φ繧ｰ縺輔ｌ縺ｦ縺�ｋ/msadc莉ｮ諠ｳ繝�ぅ繝ｬ繧ｯ繝医Μ繧貞炎髯､縺励∪縺吶�ゅ％繧後ｒ陦後≧縺溘ａ縺ｫ縲�
Microsoft Management Console/Internet Service Manager
繧帝幕縺�※莉･荳九�謫堺ｽ懊ｒ陦後▲縺ｦ縺上□縺輔＞縲�
* 'Internet Information Server'繧帝∈謚�
* 驕ｩ蛻�↑繧ｷ繧ｹ繝�Β繧帝∈謚�
* 'Default Web Site'繧帝∈謚�
* 'msadc'繧帝∈謚�
* 'Del' key繧呈款縺吶°縲�'delete icon'繧偵け繝ｪ繝�け
* 'Are you sure?' 'Yes.'
* 莉･荳九�繝ｬ繧ｸ繧ｹ繝医Μ繧ｭ繝ｼ繧貞炎髯､縺励∪縺吶��
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W3SVC \Parameters\ADCLaunch
(Note: 隕九ｄ縺吶￥縺吶ｋ縺溘ａ縺ｫ謚倥ｊ霑斐＠縺ｦ縺�∪縺�) * 莉･荳九�繝輔か繝ｫ繝�縺ｫ蜷ｫ縺ｾ繧後ｋ蜈ｨ縺ｦ縺ｮ繝輔ぃ繧､繝ｫ縺ｨ繧ｵ繝悶ョ繧｣繝ｬ繧ｯ繝医Μ繧貞炎髯､縺励∪縺吶��
?:\Program Files\Common Files\System\Msadc

----[ 3. 縺�ｍ縺�ｍ縺ｪ迥ｶ豕�
-迥ｶ豕� #1: RDS縺悟ｿ�ｦ√〒縺呻ｼ�

縺翫ｄ縺翫ｄ縲√％縺ｮ繧医≧縺ｪ螢ｰ繧定◇縺上％縺ｨ縺ｯ谿句ｿｵ縺ｪ縺薙→縺ｧ縺吶�ゅ〒繧ょ､ｧ荳亥､ｫ縲∝庄閭ｽ縺ｧ縺吶�ゅ≠縺ｪ縺溘�縲∝ｰ代↑縺上→繧� MDAC 2.0 縺ｫ繧｢繝��繧ｰ繝ｬ繝ｼ繝峨☆繧句ｿ�ｦ√′縺ゅｊ縺ｾ縺吶�ゅｂ縺励�√≠縺ｪ縺溘′縲｜ackwards-compatibility縺ｮ蝠城｡後ｒ謚ｱ縺医※縺�ｋ縺ｮ縺ｧ縺ゅｌ縺ｰ縲｀DAC 2.0 繧谷etCopkg縺ｨ蜈ｱ縺ｫ菴ｿ逕ｨ縺励※縺上□縺輔＞縲ゅ◎縺�〒縺ｪ縺�↑繧峨�｀DAC 2.1縺ｫ縺輔▲縺輔→繧｢繝��繧ｰ繝ｬ繝ｼ繝峨☆繧九∋縺阪〒縺吶�� 'HandlerRequired'繝ｬ繧ｸ繧ｹ繝医Μ繧ｭ繝ｼ縺梧怏蜉ｹ縺ｫ縺ｪ縺｣縺ｦ縺�ｋ縺薙→繧堤｢ｺ隱阪＠縺ｦ荳九＆縺��ゅ∪縺溘�ヽDS縺ｮ繧ｵ繝ｳ繝励Ν縺悟炎髯､縺輔ｌ縺ｦ縺�ｋ縺薙→繧ら｢ｺ隱阪＠縺ｦ荳九＆縺���
Microsoft縺ｯ譖ｴ縺ｫMMC莉･荳九�繝�ヵ繧ｩ繝ｫ繝�Web繧ｵ繧､繝医� /msadc繝�ぅ繝ｬ繧ｯ繝医Μ縺ｮ蛹ｿ蜷阪い繧ｯ繧ｻ繧ｹ繧堤┌蜉ｹ縺ｫ縺吶ｋ縺薙→繧よ耳螂ｨ縺励※縺�∪縺吶�ゅ％繧後↓縺ｯ custom handler 繧剃ｽｿ逕ｨ縺吶ｋ縺薙→縺ｫ縺ｪ繧翫∪縺吶�ゅ％繧後ｉ縺ｮ諠��ｱ縺ｯ縲∽ｻ･荳九�URL縺ｫ縺ゅｊ縺ｾ縺吶�� http://www.microsoft.com/Data/ado/rds/custhand.htm

-迥ｶ豕� #2: 繧ｵ繝ｳ繝励Ν繝輔ぃ繧､繝ｫ縺ｮ蜑企勁莉･螟悶�繧ｷ繧ｹ繝�Β縺ｮ譖ｴ譁ｰ繧堤ｦ∵ｭ｢縺輔ｌ縺ｦ縺�∪縺吶��

驥崎ｦ√↑諠��ｱ縺ｧ縺吶�� custom handlers繧剃ｽｿ縺�％縺ｨ縺ｯ RDS蜈ｨ菴薙ｒ菴ｿ逕ｨ荳崎�縺ｫ縺吶ｋ縺薙→辟｡縺励↓ RDS 縺ｸ縺ｮ蛹ｿ蜷阪い繧ｯ繧ｻ繧ｹ繧帝亟縺仙髪荳�縺ｮ譁ｹ豕輔〒縺吶�ゅ＠縺九＠縲ヽDS縺ｮ繧ｵ繝ｳ繝励Ν縺御ｻ･荳九↓縺ゅｌ縺ｰ縲� ?:\Program Files\Common Files\System\Msadc\Samples VbBusObj繧貞性繧�繧ｵ繝ｳ繝励Ν繝輔ぃ繧､繝ｫ縺ｯcustom handlers繧偵ヰ繧､繝代せ縺励※菴ｿ逕ｨ縺吶ｋ縺薙→縺悟�譚･縺ｦ縺励∪縺��縺ｧ縺呻ｼ√��蠕薙▲縺ｦ縲√％縺ｮ繧医≧縺ｪ繧ｵ繝ｳ繝励Ν繝輔ぃ繧､繝ｫ縺悟膚逕ｨ縺ｮ繧ｵ繝ｼ繝舌↓蟄伜惠縺励※縺�＞逅�罰縺ｯ縺ｩ縺薙↓繧ら┌縺��縺ｧ縺吶�ゅ◎縺励※縲√◎繧後�蜑企勁縺輔ｌ繧九∋縺阪〒縺吶�よ焔鬆��莉･荳九�騾壹ｊ縺ｧ縺吶��
* 莉･荳九�繝�ぅ繝ｬ繧ｯ繝医Μ莉･荳九ｒ蜈ｨ縺ｦ蜑企勁縺励∪縺吶��
?:\Progam Files\Comman Files\System\Msadc\Samples
* 莉･荳九�繝ｬ繧ｸ繧ｹ繝医Μ繧ｭ繝ｼ繧貞炎髯､縺励∪縺吶��
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W3SVC
\Parameters\ADCLaunch\VbBusObj.VbBusObjCls
縺薙ｌ縺ｫ繧医ｊ縲〃bBusObj縺ｯ蜑企勁縺輔ｌ縺ｾ縺吶�ゅ◎縺励※縲√≠縺ｪ縺溘�custom handlers縺後ヰ繧､繝代せ縺輔ｌ繧九％縺ｨ繧帝亟縺弱∪縺吶��

----[ 4. msadc.pl謾ｻ謦��逋ｺ隕�
msadc.pl縺ｮversion 1縺ｨ2縺ｫ繧医ｋ謾ｻ謦�ｒ逋ｺ隕九☆繧九％縺ｨ縺ｯ蝗ｰ髮｣縺ｧ縺ｯ縺ゅｊ縺ｾ縺帙ｓ縲ゅ％縺ｮ謾ｻ謦��莉翫〒繧り｡後ｏ繧後※縺�ｋ縺ｨ諤昴＞縺ｾ縺吶′縲∵ｮ句ｿｵ縺ｪ縺後ｉ縲∵隼騾�繧ょｮｹ譏薙↑縺ｮ縺ｧ縲√◎縺ｮ蝣ｴ蜷医�讀懃衍縺ｯ蝗ｰ髮｣縺�縺ｨ諤昴＞縺ｾ縺吶�らｧ√′縺昴ｌ繧呈嶌縺�◆縺ｨ縺阪↓縺ｯ縲∝ｼｱ轤ｹ繧呈垓縺上％縺ｨ縺ｫ蟆ょｿｵ縺励※縺�∪縺励◆縲�
msadc.pl 縺ｯ縲∵怙蛻昴↓縲√ち繝ｼ繧ｲ繝�ヨ繧ｵ繝ｼ繝舌�/msadc/msadcs.dll繧竪ET縺励ｈ縺�→縺励∪縺吶�ゅｂ縺励�√◎繧後′蟄伜惠縺吶ｋ蝣ｴ蜷医↓縺ｯ縺昴ｌ縺瑚｡後ｏ繧後�∝ｭ伜惠縺励↑縺��ｴ蜷医↓縺ｯ繧ｨ繝ｩ繝ｼ繝｡繝�そ繝ｼ繧ｸ縺ｨ蜈ｱ縺ｫ邨ゆｺ�＠縺ｾ縺吶�ゅ％縺ｮ譛�蛻昴�GET縺ｯ縲√◎縺ｮ蠎ｦ縺ｫ縺ゅ↑縺溘�繧ｵ繝ｼ繝舌�繝ｭ繧ｰ縺ｫ谿九ｋ縺ｧ縺励ｇ縺��ゅ＠縺九＠縲√％縺ｮGET繧辿EAD繧ПOST縺ｫ螟画峩縺吶ｋ繧医≧縺ｪ繧ｹ繧ｭ繝ｫ繧呈戟縺｣縺滓判謦���ｂ縺�ｋ縺ｧ縺励ｇ縺��ゅ＆繧峨↓縲”ex-encoding縺励◆URL縺ｮ繧医≧縺ｫ逞戊ｷ｡縺ｮ谿九ｊ縺ｫ縺上＞謾ｻ謦�ｒ陦後≧縺薙→繧ょ�譚･繧九〒縺励ｇ縺��ゅ＠縺九＠縲√◎繧後〒繧ゅΟ繧ｰ縺ｫ縺ｯ谿九ｊ縺ｾ縺吶��
螟ｧ莠九↑莠九�縲［sadcs.dll 繧偵ヱ繝ｩ繝｡繝ｼ繧ｿ辟｡縺励〒蜻ｼ縺ｳ蜃ｺ縺吶→縺�≧縺薙→縺ｯ縲∬ｪｰ縺九′隕九※縺ｯ縺�ｋ縺�(縺ｾ縺�)菴ｿ縺｣縺ｦ縺ｯ縺�↑縺�％縺ｨ繧呈э蜻ｳ縺励∪縺吶�３DS 縺ｨ縺�≧繧ゅ�縺ｯ縲∬ｪｰ繧りｦ九※縺�ｋ縺�縺代�√→縺�≧縺薙→縺ｯ辟｡縺上�∵ｭ｣縺励＞繝ｦ繝ｼ繧ｶ縺ｯ縺吶＄縺ｫ縺昴ｌ繧貞茜逕ｨ縺励∪縺吶�ょｾ薙▲縺ｦ縲√ヱ繝ｩ繝｡繝ｼ繧ｿ辟｡縺励〒蜻ｼ縺ｳ蜃ｺ縺励※隕九※縺�ｋ縺�縺代→縺�≧縺ｮ縺ｯ縲梧�ｪ縺励＞縲阪→縺�≧縺薙→縺ｫ縺ｪ繧翫∪縺吶��
繧ゅ＠縲［sadcs.dll縺悟ｭ伜惠縺吶ｌ縺ｰ(縺昴ｌ縺ｯ繝ｬ繧ｹ繝昴Φ繧ｹ縺九ｉ蛻�°繧翫∪縺�)縲√さ繝槭Φ繝峨ｒ襍ｰ繧峨○繧九ｈ縺�↓隕∵ｱゅ＠縺ｾ縺吶�ゅョ繝輔か繝ｫ繝医〒縺ｯ縲［sadc.pl 縺ｯ 'cmd /c' 縺� 'command /c' (莠呈鋤諤ｧ縺ｮ縺溘ａ縺ｫ)繧貞ｮ溯｡後＆縺帙ｈ縺�→縺励∪縺吶�ゅ％繧後�縲…md.exe 縺� command.com 縺ｮ蟄伜惠縺ｫ萓晏ｭ倥＠縺ｦ縺�ｋ縺薙→繧呈э蜻ｳ縺励∪縺吶�ゅ＠縺九＠縺ｪ縺後ｉ縲√◎縺ｮ縺ｩ縺｡繧峨〒繧ゅ↑縺�ｂ縺ｮ繧貞他縺ｳ蜃ｺ縺吶％縺ｨ繧ょ�譚･繧九�縺ｧ縺吶�� 莉･荳九�繧ｹ繧ｯ繝ｪ繝励ヨ縺ｯRDS縺ｮ隕∵ｱゅｒ縺励∪縺吶��
莉･荳九�URL縺ｮ縺ｩ繧後°縺ｫPOST隕∵ｱゅｒ陦後＞縺ｾ縺吶�� 騾壼ｸｸ縺ｮ隕∵ｱ�:
/msadc/msadcs.dll/ActiveDataFactory.Query custom handlers繧偵ヰ繧､繝代せ縺輔○繧九◆繧√�VbBusObj:
/msadc/msadcs.dll/VbBusObj.VbBusObjCls.GetRecordset NetBIOS蜷阪ｒ隕∵ｱゅ☆繧儀bBusObj:
/msadc/msadcs.dll/VbBusObj.VbBusObjCls.GetMachineName
迴ｾ蝨ｨ縲√ｂ縺励≠縺ｪ縺溘′蜷育炊逧�↑逶ｮ逧�〒RDS繧貞茜逕ｨ縺励※縺�ｋ縺ｪ繧峨�� ActiveDataFactory.QueryURL繧貞茜逕ｨ縺励※縺�ｋ縺ｧ縺励ｇ縺��ゅ＠縺九＠縲〃bBusObj縺ｯ荳崎ｦ√↑縺ｯ縺壹〒縺吶�ょｾ薙▲縺ｦ荳願ｨ倥�莠後▽縺ｮURL縺ｯ謾ｻ謦�→隕九↑縺励※縺�＞縺ｯ縺壹〒縺吶��
縺励°縺� 'VbBusObj'繧暖rep遲峨〒讀懃ｴ｢縺吶ｋ縺薙→縺ｯ豁｣縺励＞逋ｺ隕区婿豕輔〒縺ｯ縺ゅｊ縺ｾ縺帙ｓ縲ゆｾ九∴縺ｰ縲∽ｻ･荳九�繧医≧縺ｫhex-encode蜃ｺ譚･繧九°繧峨〒縺吶��
/%6Dsadc/%6Dsadcs.dll/V%62BusO%62j.V%62BusO%62jCls.GetRecordset (縺薙ｌ縺ｯ縺ｻ繧薙�荳�萓九〒縺�)
縺薙ｌ縺ｧ縺ｯ譁�ｭ怜�讀懃ｴ｢縺吶ｋ縺薙→縺ｯ蜃ｺ譚･縺ｾ縺帙ｓ縺ｭ縲ょｾ薙▲縺ｦ縲∵枚蟄怜�讀懃ｴ｢縺ｯ蠖ｹ縺ｫ遶九■縺ｾ縺帙ｓ縲�
譖ｴ縺ｫ莠後▽縺ｮ縺薙→繧剃ｻ倥¢蜉�縺医※縺翫″縺溘＞縺ｨ諤昴＞縺ｾ縺吶��
* 繝�ヵ繧ｩ繝ｫ繝医�msadc.pl繧ｹ繧ｯ繝ｪ繝励ヨ縺ｯ'ACTIVEDATA'繧旦ser-Agen縺ｫ菴ｿ逕ｨ縺励※縺�∪縺吶�ゅ％繧後�縺薙�繧ｹ繧ｯ繝ｪ繝励ヨ縺ｫ繧医ｋ謾ｻ謦�ｒ隱崎ｭ倥☆繧句勧縺代↓縺ｪ繧九→諤昴＞縺ｾ縺吶′縲��壼ｸｸ縺ｮRDS繧ｳ繝ｳ繝医Ο繝ｼ繝ｫ繧ゅ％縺ｮUser-Agent繧剃ｽｿ逕ｨ縺励∪縺吶�ょｾ薙▲縺ｦ縲��壼ｸｸ縺ｮ繝医Λ繝輔ぅ繝�け縺ｮ荳ｭ縺九ｉ縺薙ｌ繧呈爾縺怜�縺吶�縺ｯ蝗ｰ髮｣縺ｧ縺励ｇ縺���
* 繝�ヵ繧ｩ繝ｫ繝医�msadc.pl繧ｹ繧ｯ繝ｪ繝励ヨ縺ｯMIME縺ｮ繧ｻ繝代Ξ繝ｼ繧ｿ縺ｫ'!ADM!ROX!YOUR!WORLD!'繧剃ｽｿ逕ｨ縺励※縺�∪縺吶�ゅ＠縺九＠縲√％繧後�繝ｭ繧ｰ縺ｫ縺ｯ谿九＆繧後∪縺帙ｓ縺後�√＞縺上▽縺九�萓ｵ蜈･讀懃衍繧ｷ繧ｹ繝�Β縺ｧ縺ｯ縺薙ｌ繧偵く繝ｼ繝ｯ繝ｼ繝峨↓讀懃衍縺吶ｋ縺薙→縺悟庄閭ｽ縺ｧ縺吶��
繝�ヵ繧ｩ繝ｫ繝医〒縺ｯmsadc.pl繧ｹ繧ｯ繝ｪ繝励ヨ縺ｯ繧ｵ繝ｼ繝舌〒隕九▽縺九▲縺溘Ο繝ｼ繧ｫ繝ｫ縺ｮ.MDB繝輔ぃ繧､繝ｫ繧貞茜逕ｨ縺励ｈ縺�→縺励∪縺吶�ゅｂ縺励◎繧後′隕九▽縺九▲縺溘↑繧峨��.MDB繝輔ぃ繧､繝ｫ縺ｫ'AZZ'縺ｨ縺�≧蜷榊燕縺ｮ繝��繝悶Ν繧剃ｽ懈�縺吶ｋ縺ｧ縺励ｇ縺��ゅ◎縺ｮ繝��繝悶Ν縺ｯ謾ｻ謦��蠕後〒繧よｶ医＠縺ｾ縺帙ｓ縲�
縺励°縺励�［sadc.pl縺ｮversion 2 縺ｧ縺ｯ'AZZ'繝��繝悶Ν繧剃ｽ懊ｉ縺ｪ縺�け繧ｨ繝ｪ繧ょ茜逕ｨ縺吶ｋ縺薙→縺悟�譚･縺ｾ縺吶�ゅ◎縺励※縲√Ο繝ｼ繧ｫ繝ｫ縺ｮ.MDB縺輔∴繧ょ茜逕ｨ縺励↑縺�％縺ｨ縺悟庄閭ｽ縺ｫ縺ｪ縺｣縺ｦ縺�∪縺�(UNC繧偵し繝昴�繝医＠縺ｦ縺�∪縺�)縲�

----[ 5. 譛�蠕後↓
縺薙�繧｢繝峨ヰ繧､繧ｶ繝ｪ繧偵�√≠縺ｪ縺滓婿縺ｮ轤ｺ縺ｫ螟懊ｂ蟇昴↑縺�〒譖ｸ縺�※縺�◆縺ｨ縺阪↓縲∽ｻ悶�驥崎ｦ√↑縺薙→繧呈嶌縺上◆繧√↓縺昴ｌ繧剃ｸｭ譁ｭ縺励↑縺代ｌ縺ｰ縺ｪ繧峨↑縺上↑繧翫∪縺励◆縲�
縺ゅ↑縺溘′RDS縺ｫ繧医▲縺ｦ謾ｻ謦�＆繧後◆縺薙→繧堤衍繧区怙繧り憶縺�婿豕輔�縲∽ｻ･荳九�URL縺ｫ遉ｺ縺輔ｌ縺ｦ縺�∪縺吶��
https://wiretrip.net/rfp/
縺昴ｓ縺ｪ縺ｫ髮｣縺励＞縺薙→縺ｧ縺ｯ縺ゅｊ縺ｾ縺帙ｓ縲よ怙菴朱剞縲∽ｸ願ｨ倥�繝輔ぃ繧､繝ｫ繧貞炎髯､縺吶ｌ縺ｰ縺ゅ↑縺溘�縲√∪縺ゅ∪縺ょｮ牙�縺ｧ縺吶�ゅ％繧後〒Web繧ｵ繧､繝医ｒ繝｡繝√Ε繧ｯ繝√Ε縺ｫ縺輔ｌ繧句ｿ��縺ｯ縺ｪ縺上↑繧翫∪縺吶��
騾ｲ繧薙〒繝代ャ繝√ｒ蜈�※縺ｾ縺励ｇ縺��� .rain.forest.puppy繧医ｊ
PS.遘√′譎ｮ騾壹�莠ｺ髢薙〒縺吶�ょｾ薙▲縺ｦ縲√％縺ｮ繝峨く繝･繝｡繝ｳ繝医↓繧る俣驕輔＞縺後≠繧九°繧ゅ＠繧後∪縺帙ｓ縲ゅ＠縺九＠縲√ｂ縺�夢繧後∪縺励◆縲ゅ％縺ｮ縺薙→縺九ｉ髢区叛縺輔ｌ縺溘＞縺ｮ縺ｧ縺吶�る俣驕輔＞縺後≠縺｣縺ｦ繧りｨｱ縺励※縺上□縺輔＞縲�
險ｳ閠�ｳｨ�臥ｧ√�鄙ｻ險ｳ縺ｫ閾ｴ蜻ｽ逧�↑髢馴＆縺�′縺ゅ▲縺溷�ｴ蜷医↓縺ｯ騾｣邨｡縺励※縺上□縺輔＞縲�

----[ 6. 蜿り��
- Office 97/Jet 3.5 update binary
(i386) https://wiretrip.net/rfp/bins/msadc/jetcopkg.exe
http://officeupdate.microsoft.com/isapi/gooffupd.asp
?TARGET=/downloaditems/JetCopkg.exe - Microsoft Universal Data Access homepage
http://www.microsoft.com/data/ - MDAC 2.1.2.4202.3 (GA) (aka MDAC 2.1 sp2)
update (i386) https://wiretrip.net/rfp/bins/msadc/mdac_typ.exe
http://www.microsoft.com/data/download_21242023.htm - MDAC 2.1.1.3711.11 (GA)
(aka MDAC 2.1 sp1) hotfix http://www.microsoft.com/data/download/jetODBC.exe -
MDAC 2.1 release manifest
http://www.microsoft.com/data/MDAC21info/MDAC21sp2manifest.htm - MDAC 2.1
installation FAQ http://www.microsoft.com/data/MDAC21info/MDACinstQ.htm -
Security Implications of RDS 1.5, IIS 3.0 or 4.0, and ODBC
http://support.microsoft.com/support/kb/articles/q184/3/75.asp - Unauthorized
ODBC Data Access with IIS and RDS (MS99-004)
http://www.microsoft.com/security/bulletins/ms98-004.asp
- Re-release of MS99-004 (MS99-025)
http://www.microsoft.com/security/bulletins/ms99-025.asp
-MS99-025 FAQ (best explanation of problem by Microsoft)
http://www.microsoft.com/security/bulletins/MS99-025faq.asp
-MS99-30: Patch available for Office ODBC Vulnerabilities
http://www.microsoft.com/security/bulletins/ms99-030.asp
-Jet Expression Can
Execute Unsafe VBA Functions
http://support.microsoft.com/support/kb/articles/q239/1/04.asp
-Implementing Custom Handlers in RDS 2.0
http://www.microsoft.com/Data/ado/rds/custhand.htm
-Handsafe registry patch (enables handlers)
https://wiretrip.net/rfp/bins/msadc/handsafe.exe
http://www.microsoft.com/security/bulletins/handsafe.exe
-RFP9901: NT ODBC remote compromise
https://wiretrip.net/rfp/p/doc.asp?id=3&iface=2
-RFP9902: RDS/IIS 4.0 vulnerability and exploit
https://wiretrip.net/rfp/p/doc.asp?id=1&iface=2
-RDS exploit (msadc.pl v1 and v2)
https://wiretrip.net/rfp/p/doc.asp?id=16&iface=2
-ULG recommended fix on OSALL
http://www.aviary-mag.com/News/Powerful_Exploit/ULG_Fix/ulg_fix.html
-CERT blurb
http://www.cert.org/current/current_activity.html#0
-Attrition mirror of defaced websites (patch or you'll be on it!)
http://www.attrition.org/mirror/attrition/
--- rain forest puppy / [email protected] -----------ADM / wiretrip
--- Patch your system before flipper and fuqnut get to you...
--- Advisory RFP9907 ----------------------------- rfp.labs -----------