Detections
Analytics
MS13-024: Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2780176)
high Nessus Plugin ID 65213
Language:
Synopsis
The version of SharePoint running on the remote host has multiple vulnerabilities.Description
The versions of Microsoft SharePoint Server 2010 and SharePoint Foundation 2010 have the following vulnerabilities :- A callback function vulnerability exists that could allow an attacker to read data or perform other unauthorized actions. (CVE-2013-0080)
- A cross-site scripting vulnerability exists.
(CVE-2013-0083)
- A directory traversal vulnerability exists that could allow an attacker to read arbitrary files.
(CVE-2013-0084)
- A buffer overflow exists that could result in a denial of service. Code execution is reportedly not possible.
(CVE-2013-0085)
Solution
Microsoft has released a set of patches for SharePoint Server 2010 and SharePoint Foundations 2010.See Also
Plugin Details
Severity: High
ID: 65213
File Name: smb_nt_ms13-024.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 3/12/2013
Updated: 1/28/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2013-0084
Vulnerability Information
CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:sharepoint_foundation, cpe:/a:microsoft:sharepoint_server
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 3/12/2013
Vulnerability Publication Date: 3/12/2013
Reference Information
CVE: CVE-2013-0080, CVE-2013-0083, CVE-2013-0084, CVE-2013-0085