Detections
Analytics
MS13-100: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2904244)
medium Nessus Plugin ID 71315
Language:
Synopsis
The remote host is affected by multiple vulnerabilities.Description
The versions of Office SharePoint Server, or Office Web Apps installed on the remote host are affected by code execution vulnerabilities. By sending specially crafted page content to a SharePoint server, a remote, authenticated attacker could execute arbitrary code on the remote host subject to the privileges of the W3WP service account.Solution
Microsoft has released a set of patches for SharePoint Server 2010, SharePoint Server 2013 and Office Web Apps 2013.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2013/ms13-100
Plugin Details
Severity: Medium
ID: 71315
File Name: smb_nt_ms13-100.nasl
Version: 1.10
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 12/11/2013
Updated: 11/27/2019
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2013-5059
Vulnerability Information
CPE: cpe:/a:microsoft:sharepoint_server, cpe:/a:microsoft:office_web_apps
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 12/10/2013
Vulnerability Publication Date: 12/10/2013
Reference Information
CVE: CVE-2013-5059
BID: 64081