HTTP: Microsoft Sharepoint Server 2007 Privilege Escalation

This signature detects attempts to exploit a known vulnerability against Microsoft Sharepoint Server 2007. A successful attack can escalate a user's privileges, causing denial of service by executing commands that would cause load on the server; an attacker could also gain sensitive information from the Microsoft Office Sharepoint Server 2007, for example internal path names and user's e-mail addresses.

Extended Description

Microsoft SharePoint Server is prone to a vulnerability that could let remote attackers gain unauthorized access. A successful exploit will let attackers access certain administrative functions of the SharePoint Server.

Affected Products

Microsoft sharepoint_server_2007_x64

References

BugTraq: 32638

CVE: CVE-2008-4032

Short Name

HTTP:IIS:SHAREPOINT-PRIV-ESC

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Microsoft Sharepoint Server 2007 Privilege Escalation

Extended Description

Affected Products

References

Found a potential security threat?