NT Versions Affected:

3.5, 3.51, 4.0


Problem:

A User SID can be read from a v1.0 database and pasted over a SID in the MSysAccounts table in the SystemDB, allowing someone to access a database as a different user.

This affects MS Access v2.0 and v1.0 when a v1.0 database is opened.


Verification:

http://www.microsoft.com/kb/articles/q112/1/21.htm