Detections
Analytics
MS12-073: Vulnerabilities in Microsoft IIS Could Allow Information Disclosure (2733829) (uncredentialed check)
medium Nessus Plugin ID 62940
Language:
Synopsis
The Microsoft IIS service running on the remote system contains flaws that could lead to an unauthorized information disclosure.Description
The FTP service in the version of Microsoft IIS 7.0 or 7.5 on the remote Windows host is affected by a command injection vulnerability that could result in unauthorized information disclosure.Solution
Microsoft has released a set of patches for Vista, 2008, 7, and 2008 R2.See Also
Plugin Details
Severity: Medium
ID: 62940
File Name: iis_ftp7_ms12-073.nasl
Version: 1.11
Type: remote
Agent: windows
Family: Windows
Published: 11/16/2012
Updated: 1/16/2024
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 1.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2012-2532
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 4.6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:iis, cpe:/a:microsoft:ftp_service
Exploit Ease: No known exploits are available
Patch Publication Date: 11/13/2012
Vulnerability Publication Date: 11/13/2012
Reference Information
CVE: CVE-2012-2532
BID: 56440