CVE-2008-4032 Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attacke...
HighCVSS 7.5
EPSS 47.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office sharepoint server | = 2007 | No fix listed |
| Microsoft office sharepoint server | = 2007-sp1 | No fix listed |
| Microsoft search server | = 2008 | No fix listed |
References
- 33063 third-party-advisory
- 1021367 vdb-entry
- TA08-344A third-party-advisory us-government-resource
- ADV-2008-3389 vdb-entry
- MS08-077 vendor-advisory
- oval:org.mitre.oval:def:5774 signature vdb-entry