Windows XP Community - XPHeads



Spyware Doctor

Microsoft Security Advisory (950627) - Help

microsoft.public.windowsxp.security_admin


Reply
  #1 (permalink)  
Old 04-02-2008, 07:18 PM
KC
 
Posts: n/a
Microsoft Security Advisory (950627) - Help
So, as requested in this advisory, I entered the command line on one of the
computers here to disable the jet database engine:

Caution, read the rest of this post before entering this line...
echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /P everyone:N

So, that sets it as it should.

Come to find out, some of the programs on the computer require the access to
that specific .dll. Fine. I'll re-enable it using the instructions also
listed an undo procedure... the advisory states to enter:

echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /R everyone

I get "Access Denied".

Anyone have a suggestion on how to re-enable the msjet40.dll?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 04-02-2008, 10:20 PM
nass
 
Posts: n/a
RE: Microsoft Security Advisory (950627) - Help


"KC" wrote:

> So, as requested in this advisory, I entered the command line on one of the
> computers here to disable the jet database engine:
>
> Caution, read the rest of this post before entering this line...
> echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /P everyone:N
>
> So, that sets it as it should.
>
> Come to find out, some of the programs on the computer require the access to
> that specific .dll. Fine. I'll re-enable it using the instructions also
> listed an undo procedure... the advisory states to enter:
>
> echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /R everyone
>
> I get "Access Denied".
>
> Anyone have a suggestion on how to re-enable the msjet40.dll?



I'm afraid your system may be compromised or you messed it up!.
Did you tried the |keys in the registry to adjust to loosen its grip a
little bit?.
Read the info here:
Vulnerability in Microsoft Jet Database Engine (Jet) Could Allow Remote Code
Execution
http://www.microsoft.com/technet/sec...ry/950627.mspx

http://office.microsoft.com/en-us/ac...321681033.aspx
http://office.microsoft.com/en-us/ac...321611033.aspx
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 04-03-2008, 01:03 PM
KC
 
Posts: n/a
RE: Microsoft Security Advisory (950627) - Help
Thanks for the links. The 1st one is the exact tech note that tells one to
disable the Jet Engine and how to re-enable on the WorkArounds.

The others do not mention what happens or how to fix when the re-enabling
fails.

I am 99.9% sure this drive was not compromised. Why? It's never been hooked
up to the internet. Yet, mandates from upon high (management) say 'you have
to disable this'. (Ridiculous if you ask me, that one has to do things for
computers to prevent it from attack when it'll never be effected through the
internet or e-mail).

Yet, also, no one around here where I'm located knows how to re-enable it.



"nass" wrote:

>
>
> "KC" wrote:
>
> > So, as requested in this advisory, I entered the command line on one of the
> > computers here to disable the jet database engine:
> >
> > Caution, read the rest of this post before entering this line...
> > echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /P everyone:N
> >
> > So, that sets it as it should.
> >
> > Come to find out, some of the programs on the computer require the access to
> > that specific .dll. Fine. I'll re-enable it using the instructions also
> > listed an undo procedure... the advisory states to enter:
> >
> > echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /R everyone
> >
> > I get "Access Denied".
> >
> > Anyone have a suggestion on how to re-enable the msjet40.dll?

>
>
> I'm afraid your system may be compromised or you messed it up!.
> Did you tried the |keys in the registry to adjust to loosen its grip a
> little bit?.
> Read the info here:
> Vulnerability in Microsoft Jet Database Engine (Jet) Could Allow Remote Code
> Execution
> http://www.microsoft.com/technet/sec...ry/950627.mspx
>
> http://office.microsoft.com/en-us/ac...321681033.aspx
> http://office.microsoft.com/en-us/ac...321611033.aspx

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 04-03-2008, 07:05 PM
KC
 
Posts: n/a
RE: Microsoft Security Advisory (950627) - Help
The fix:

Copied the .dll from another machine (same version) onto a CD.
Started the 'broken' machine in SafeMode/CommandPrompt.

Deleted the 'broken' .dll then copied the new one to the same location.
Rebooted. Viola. Works fine.

Gah.

"KC" wrote:

> Thanks for the links. The 1st one is the exact tech note that tells one to
> disable the Jet Engine and how to re-enable on the WorkArounds.
>
> The others do not mention what happens or how to fix when the re-enabling
> fails.
>
> I am 99.9% sure this drive was not compromised. Why? It's never been hooked
> up to the internet. Yet, mandates from upon high (management) say 'you have
> to disable this'. (Ridiculous if you ask me, that one has to do things for
> computers to prevent it from attack when it'll never be effected through the
> internet or e-mail).
>
> Yet, also, no one around here where I'm located knows how to re-enable it.
>
>
>
> "nass" wrote:
>
> >
> >
> > "KC" wrote:
> >
> > > So, as requested in this advisory, I entered the command line on one of the
> > > computers here to disable the jet database engine:
> > >
> > > Caution, read the rest of this post before entering this line...
> > > echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /P everyone:N
> > >
> > > So, that sets it as it should.
> > >
> > > Come to find out, some of the programs on the computer require the access to
> > > that specific .dll. Fine. I'll re-enable it using the instructions also
> > > listed an undo procedure... the advisory states to enter:
> > >
> > > echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /R everyone
> > >
> > > I get "Access Denied".
> > >
> > > Anyone have a suggestion on how to re-enable the msjet40.dll?

> >
> >
> > I'm afraid your system may be compromised or you messed it up!.
> > Did you tried the |keys in the registry to adjust to loosen its grip a
> > little bit?.
> > Read the info here:
> > Vulnerability in Microsoft Jet Database Engine (Jet) Could Allow Remote Code
> > Execution
> > http://www.microsoft.com/technet/sec...ry/950627.mspx
> >
> > http://office.microsoft.com/en-us/ac...321681033.aspx
> > http://office.microsoft.com/en-us/ac...321611033.aspx

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 04-06-2008, 02:27 PM
nass
 
Posts: n/a
RE: Microsoft Security Advisory (950627) - Help
Hi KC,
Glad you got it sorted and thanks for these valuable info and sharing it
with us.
Much appreciated.
Good luck.
nass
---
http://www.nasstec.co.uk

"KC" wrote:

> The fix:
>
> Copied the .dll from another machine (same version) onto a CD.
> Started the 'broken' machine in SafeMode/CommandPrompt.
>
> Deleted the 'broken' .dll then copied the new one to the same location.
> Rebooted. Viola. Works fine.
>
> Gah.
>
> "KC" wrote:
>
> > Thanks for the links. The 1st one is the exact tech note that tells one to
> > disable the Jet Engine and how to re-enable on the WorkArounds.
> >
> > The others do not mention what happens or how to fix when the re-enabling
> > fails.
> >
> > I am 99.9% sure this drive was not compromised. Why? It's never been hooked
> > up to the internet. Yet, mandates from upon high (management) say 'you have
> > to disable this'. (Ridiculous if you ask me, that one has to do things for
> > computers to prevent it from attack when it'll never be effected through the
> > internet or e-mail).
> >
> > Yet, also, no one around here where I'm located knows how to re-enable it.
> >
> >
> >
> > "nass" wrote:
> >
> > >
> > >
> > > "KC" wrote:
> > >
> > > > So, as requested in this advisory, I entered the command line on one of the
> > > > computers here to disable the jet database engine:
> > > >
> > > > Caution, read the rest of this post before entering this line...
> > > > echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /P everyone:N
> > > >
> > > > So, that sets it as it should.
> > > >
> > > > Come to find out, some of the programs on the computer require the access to
> > > > that specific .dll. Fine. I'll re-enable it using the instructions also
> > > > listed an undo procedure... the advisory states to enter:
> > > >
> > > > echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /R everyone
> > > >
> > > > I get "Access Denied".
> > > >
> > > > Anyone have a suggestion on how to re-enable the msjet40.dll?
> > >
> > >
> > > I'm afraid your system may be compromised or you messed it up!.
> > > Did you tried the |keys in the registry to adjust to loosen its grip a
> > > little bit?.
> > > Read the info here:
> > > Vulnerability in Microsoft Jet Database Engine (Jet) Could Allow Remote Code
> > > Execution
> > > http://www.microsoft.com/technet/sec...ry/950627.mspx
> > >
> > > http://office.microsoft.com/en-us/ac...321681033.aspx
> > > http://office.microsoft.com/en-us/ac...321611033.aspx

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 01:03 PM.


Registry Mechanic - Free Scan Now
Driver Scanner 2009 - Free Scan Now




Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.1.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74