CVE-1999-0364: Critical severity Fms Inc. Total Vb Sourcebook vulnerability
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove any database passwords stored in foreign .mdb files and reconfigure usage so database passwords are not stored in foreign .mdb files.
Microsoft Access 97 database password storage in foreign .mdb = do not store plaintext - Compensating control
Restrict access to foreign .mdb files and their directories using file-system ACLs, network access controls, or isolation so only authorized users/processes can read the files.
- Operational
Rotate/change any database passwords that may have been stored in plaintext and re-secure affected databases (for example by removing plaintext passwords and reapplying secure authentication).
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0364?
CVE-1999-0364 is considered a moderate risk vulnerability due to the exposure of sensitive plaintext passwords in Microsoft Access 97.
How do I fix CVE-1999-0364?
To mitigate CVE-1999-0364, avoid using plain-text passwords and implement strong encryption methods for database security.
Which software is affected by CVE-1999-0364?
CVE-1999-0364 specifically affects Microsoft Access 97 and potentially applications that leverage the same database structure.
What kind of data is vulnerable in CVE-1999-0364?
CVE-1999-0364 exposes database passwords in plaintext, which can lead to unauthorized access to sensitive data.
Is there a patch for CVE-1999-0364?
There is no official patch for CVE-1999-0364, but users should look for third-party tools or upgrade to a more secure version of Microsoft Access.