Detections
Analytics
MS08-077: Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege (957175)
medium Nessus Plugin ID 35076
Language:
Synopsis
A user can elevate his privileges through SharePoint.Description
The remote host is running a version of SharePoint Server 2007 that has a privilege elevation vulnerability in the SharePoint site.An attacker may use this to execute scripts in the context of the SharePoint site.
Solution
Microsoft has released a set of patches for SharePoint Server 2007.See Also
Plugin Details
Severity: Medium
ID: 35076
File Name: smb_nt_ms08-077.nasl
Version: 1.32
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 12/10/2008
Updated: 8/5/2020
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.3
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 4.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P
CVSS Score Source: CVE-2008-4032
Vulnerability Information
CPE: cpe:/a:microsoft:sharepoint_server
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 12/9/2008
Vulnerability Publication Date: 12/9/2008
Reference Information
CVE: CVE-2008-4032
BID: 32638