Vulnerability in Microsoft Data Access Components Could Allow Remote Code
Execution (927779) patch is failling becuse of wrong version of MDAC 2.8 SP1
is installed on sbs2000 server.
when I checked with component checker version 2. it identify as MDAC 2.8 SP1
ON WINDOWS XP SP2.
ODBC Data Sources administrator also gives error message that ODBC resource
dll is different version than the administrator.
I don't know when and how it happen that SBS2000 installed windows XP
version of MDAC 2.8 SP1. but I found out that after I installed SQL200 server
on SBS2000.
I try to install windows 2000 SP4 version of MDAC 2.8 SP1 but it didn't
change any.
Thanks in advance.
Following is component checker output.
<closestversion ClosestReleaseMatches="
MDAC 2.8 SP1 ON WINDOWS XP SP2"><filedetails><group name="MDAC 2.5 SP3"
count="3"><file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="MSDASC.DLL" dir="%COMMONFILES%\system\ole db\" CoreFile="Yes">
<release name="MDAC 2.5 SP3" version="2.53.6200.0"/>
<found xmlns="" Description="Microsoft Data Access - OLE DB Service
Components Stub" date="06/19/2003" fileVersion="2.53.6200.0" size="5392"
version="2.53.6200.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="MSDASQL.DLL" dir="%COMMONFILES%\system\ole db\" CoreFile="Yes">
<release name="MDAC 2.5 SP3" version="2.53.6200.0"/>
<found xmlns="" Description="Microsoft Data Access - OLE DB Provider for
ODBC Drivers" date="06/19/2003" fileVersion="2.53.6200.0" size="303376"
version="2.53.6200.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="MSDASQLR.DLL" dir="%COMMONFILES%\system\ole db\" CoreFile="Yes">
<release name="MDAC 2.5 SP3" version="2.53.6200.0"/>
<found xmlns="" Description="Microsoft Data Access - OLE DB Provider for
ODBC Drivers Resources" date="06/19/2003" fileVersion="2.53.6200.0"
size="16384" version="2.53.6200.0"/></file>
</group><group name="MDAC 2.8 SP1 ON WINDOWS XP SP2" count="10"><file
xmlns="http://tempuri.org/CCFilestream_template.xsd" name="MSADCOR.DLL"
dir="%COMMONFILES%\system\msadc\" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2.81.1117.0"
fileversion="2.81.1117.0"/>
<found xmlns="" Description="Microsoft Data Access - Remote Data
Services Data Control Resources" date="04/28/2004" fileVersion="2.81.1117.0
built by: (_sqlbld)" size="16384" version="2.81.1117.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="msado15.dll" dir="%COMMONFILES%\system\ado\" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2.81.1117.0"
fileversion="2.81.1117.0"/>
<found xmlns="" Description="Microsoft Data Access - ActiveX Data
Objects" date="04/28/2004" fileVersion="2.81.1117.0 built by: (_sqlbld)"
size="516096" version="2.81.1117.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="MSADOMD.DLL" dir="%COMMONFILES%\system\ado\" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2.81.1117.0"
fileversion="2.81.1117.0"/>
<found xmlns="" Description="Microsoft Data Access - ActiveX Data
Objects (Multi-Dimensional)" date="04/28/2004" fileVersion="2.81.1117.0 built
by: (_sqlbld)" size="167936" version="2.81.1117.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="msadrh15.dll" dir="%COMMONFILES%\system\ado\" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2.81.1117.0"
fileversion="2.81.1117.0"/>
<found xmlns="" Description="Microsoft Data Access - ActiveX Data
Objects Rowset Helper" date="04/28/2004" fileVersion="2.81.1117.0 built by:
(_sqlbld)" size="53248" version="2.81.1117.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="OLEDB32.DLL" dir="%COMMONFILES%\system\ole db\" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2.81.1117.0"
fileversion="2.81.1117.0"/>
<found xmlns="" Description="Microsoft Data Access - OLE DB Core
Services" date="04/28/2004" fileVersion="2.81.1117.0 built by: (_sqlbld)"
size="458752" version="2.81.1117.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="SQLOLEDB.DLL" dir="%COMMONFILES%\system\ole db\" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2000.85.1117.0"
fileversion="8.0.1117.0"/>
<found xmlns="" Description="Microsoft OLE DB Provider for SQL Server"
date="04/28/2004" fileVersion="2000.085.1117.00 built by: (_sqlbld)"
size="512000" version="2000.85.1117.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="SQLSRV32.DLL" dir="%SYSTEMDIR%\" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2000.85.1117.0"
fileversion="3.85.1117.0"/>
<found xmlns="" Description="Microsoft SQL Server ODBC Driver"
date="04/28/2004" fileVersion="2000.085.1117.00 built by: (_sqlbld)"
size="421888" version="2000.85.1117.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="msdart.dll" dir="%SYSTEMDIR%" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2.81.1117.0"
fileversion="2.81.1117.0"/>
<found xmlns="" Description="Microsoft Data Access - OLE DB Runtime
Routines" date="04/28/2004" fileVersion="2.81.1117.0 built by: (_sqlbld)"
size="147456" version="2.81.1117.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="msdaorar.dll" dir="%COMMONFILES%\system\ole db\" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2.81.1117.0"
fileversion="2.81.1117.0"/>
<found xmlns="" Description="Microsoft Data Access - OLE DB Provider for
Oracle Resources" date="04/28/2004" fileVersion="2.81.1117.0 built by:
(_sqlbld)" size="16384" version="2.81.1117.0"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="msorc32r.dll" dir="%SYSTEMDIR%\" CoreFile="Yes">
<release name="MDAC 2.8 SP1 on Windows XP SP2" version="2.575.1117.0"
fileversion="2.575.1117.0"/>
<found xmlns="" Description="Microsoft Data Access - ODBC Driver for
Oracle Resources" date="04/28/2004" fileVersion="2.575.1117.0 built by:
(_sqlbld)" size="20480" version="2.575.1117.0"/></file>
</group></filedetails></closestversion>