Executive Summary

Informations
NameCVE-2012-2532First vendor Publication2012-11-13
VendorCveLast vendor Modification2018-10-12

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score5Attack RangeNetwork
Cvss Impact Score2.9Attack ComplexityLow
Cvss Expoit Score10AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2532

CWE : Common Weakness Enumeration

%idName
100 %CWE-200Information Exposure

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:15786
 
Oval ID: oval:org.mitre.oval:def:15786
Title: FTP Command Injection Vulnerability - MS12-073
Description: Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2012-2532
Version: 5
Platform(s): Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Product(s): Microsoft Internet Information Services 7.0
Microsoft Internet Information Services 7.5
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application2
Application1
Os4
Os6
Os2

OpenVAS Exploits

DateDescription
2012-11-14Name : Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)
File : nvt/secpod_ms12-073.nasl

Information Assurance Vulnerability Management (IAVM)

DateDescription
2012-11-15IAVM : 2012-B-0111 - Multiple Vulnerabilities in Microsoft Internet Information Services (IIS)
Severity : Category I - VMSKEY : V0034953

Nessus® Vulnerability Scanner

DateDescription
2012-11-16Name : The Microsoft IIS service running on the remote system contains flaws that co...
File : iis_ftp7_ms12-073.nasl - Type : ACT_ATTACK
2012-11-14Name : The Microsoft IIS service running on the remote system contains flaws that co...
File : smb_nt_ms12-073.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

SourceUrl
BID http://www.securityfocus.com/bid/56440
MS https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12...

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
DateInformations
2019-05-09 12:04:36
  • Multiple Updates
2018-10-13 05:18:36
  • Multiple Updates
2018-08-08 17:19:17
  • Multiple Updates
2017-09-19 09:25:17
  • Multiple Updates
2016-08-05 12:03:45
  • Multiple Updates
2016-06-28 21:58:00
  • Multiple Updates
2016-04-26 21:49:58
  • Multiple Updates
2014-02-17 11:10:30
  • Multiple Updates
2013-11-11 12:39:56
  • Multiple Updates
2013-11-04 21:22:58
  • Multiple Updates
2013-05-10 22:39:39
  • Multiple Updates
2013-03-06 13:18:53
  • Multiple Updates
2012-11-14 21:20:19
  • Multiple Updates
2012-11-14 13:20:55
  • First insertion