oval:org.mitre.oval:def:5774
| Definition Id: oval:org.mitre.oval:def:5774 | |||
| Oval ID: | oval:org.mitre.oval:def:5774 | ||
| Title: | Access Control Vulnerability | ||
| Description: | Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2008-4032 | Version: | 3 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 | Product(s): | Microsoft Office SharePoint Server 2007 Microsoft Search Server 2008 |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:2313 | |||
| Oval ID: | oval:org.mitre.oval:def:2313 | ||
| Title: | Microsoft Office SharePoint Server 2007 is installed. | ||
| Description: | Microsoft Office SharePoint Server 2007 is installed. | ||
| Family: | windows | Class: | inventory |
| Reference(s): | cpe:/a:microsoft:sharepoint_server:2007 | Version: | 12 |
| Platform(s): | Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 | Product(s): | Microsoft Office SharePoint Server 2007 |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:5774 | |||
| Definition Id: oval:org.mitre.oval:def:14104 | |||
| Oval ID: | oval:org.mitre.oval:def:14104 | ||
| Title: | Microsoft Search Server 2008 is installed | ||
| Description: | Microsoft Search Server 2008 is installed. | ||
| Family: | windows | Class: | inventory |
| Reference(s): | cpe:/a:microsoft:search_server:2008 | Version: | 3 |
| Platform(s): | Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista | Product(s): | Microsoft Windows 7 |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:5774 | |||
