Detections
Analytics
MS13-013: Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (2784242)
low Nessus Plugin ID 64574
Language:
Synopsis
The remote Windows host is affected by multiple code execution vulnerabilities.Description
The remote host is using a vulnerable version of FAST Search Server 2010 for SharePoint. When the Advanced Filter Pack is enabled, vulnerable versions of the Oracle Outside In libraries are used to parse files. An attacker could exploit this by uploading a malicious file to a site using FAST Search to index, which could result in arbitrary code execution.Solution
Microsoft has released a set of patches for FAST Search Server 2010.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2013/ms13-013
Plugin Details
Severity: Low
ID: 64574
File Name: smb_nt_ms13-013.nasl
Version: 1.13
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 2/12/2013
Updated: 12/4/2019
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.7
CVSS v2
Risk Factor: Low
Base Score: 2.1
Temporal Score: 1.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2012-3217
Vulnerability Information
CPE: cpe:/o:microsoft:windows
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 2/12/2013
Vulnerability Publication Date: 10/16/2012
Reference Information
CVE: CVE-2012-3214, CVE-2012-3217