Lucene search
HistoryMay 18, 2000 - 4:00 a.m.
CVE-2000-0325
microsoft
jet database engine
vba shell vulnerability
cve-2000-0325
command execution
database query
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.1%
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the “VBA Shell” vulnerability.
Affected configurations
Node
microsoftjetMatch3.5
ORmicrosoftjetMatch3.5.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:jet | microsoft jet | eq | 3.5 |
| microsoft:jet | microsoft jet | eq | 3.5.1 |
Related
cvelist
cvelist
CVE-2000-0325
2000-05-18 04:00:00
nvd
nvd
CVE-2000-0325
1999-08-20 04:00:00
packetstorm
packetstorm
RFP2K04.txt
2000-05-17 00:00:00
securityvulns
securityvulns
RFP2K04: Mining BlackICE with RFPickAxe
2000-05-18 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.1%
Related for CVE-2000-0325