The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attackers to execute arbitrary code by leveraging an unassigned workflow, aka "MAC Disabled Vulnerability."

The version of Microsoft Exchange installed on the host is affected by the following vulnerabilities :

  - A code execution vulnerability exists that could allow     an attacker to execute arbitrary code in the context of     the OWA service account. (CVE-2013-1330)

  - A cross-site scripting vulnerability exists in OWA in     which an attacker could elevate their privileges and run     a script in the context of the current user.
    (CVE-2013-5072)

  - Two code execution vulnerabilities exist in the WebReady     Document Viewing feature of Outlook Web Access. Code     execution is limited to the LocalService account.  In     addition, a denial of service vulnerability exists in     the DLP feature of Exchange 2013. (CVE-2013-5763,     CVE-2013-5791)

The versions of Office SharePoint Server, SharePoint Server, Windows SharePoint Services, SharePoint Foundation, or Office Web Apps installed on the remote host are affected by multiple vulnerabilities :

  - A denial of service vulnerability exits that could cause     the W3WP process to stop responding. (CVE-2013-0081)

  - A remote code execution vulnerability exists in the way     Microsoft Office Services and Web Apps parse content in     specially crafted files. (CVE-2013-1315)

  - A remote code execution vulnerability exists in the way     SharePoint Server handles unassigned workflows.
    (CVE-2013-1330)

  - An unspecified cross-site scripting vulnerability     exists. (CVE-2013-3179)

  - An unspecified POST cross-site scripting vulnerability     exists. (CVE-2013-3180)

  - Multiple memory corruption vulnerabilities exist in the     way that Microsoft Office software parses specially     crafted files. (CVE-2013-2847, CVE-2013-3848,     CVE-2013-3849, CVE-2013-3857, CVE-2013-3858)

ID	Name	Product	Family	Severity
71320	MS13-105: Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2915705)	Nessus	Windows : Microsoft Bulletins	critical
69827	MS13-067: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2834052)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2013-1330

critical

Tenable Plugins

critical

critical