CVE-2012-2532 Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive informat...
MediumCVSS 5.0
EPSS 42.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ftp service | = 7.0 | No fix listed |
| Microsoft ftp service | = 7.5 | No fix listed |
References
- 56440 third-party-advisory vdb-entry
- MS12-073 vendor-advisory
- oval:org.mitre.oval:def:15786 signature third-party-advisory vdb-entry