ID de Prueba:	1.3.6.1.4.1.25623.1.0.902953
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft SharePoint Server Privilege Elevation Vulnerabilities (2780176)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS13-024.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS13-024. Vulnerability Insight: - The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests. - Certain unspecified input is not properly sanitized before being returned to the user. - An error related to the W3WP process when handling URLs can be exploited to cause a buffer overflow and subsequently terminate the W3WP process via a specially crafted URL. Vulnerability Impact: Successful exploitation could allow an attacker to bypass certain security restrictions, disclose certain system data and conduct cross-site scripting and spoofing attacks. Affected Software/OS: - Microsoft SharePoint Server 2010 Service Pack 1 - Microsoft SharePoint Foundation 2010 Service Pack 1 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0080 Cert/CC Advisory: TA13-071A http://www.us-cert.gov/ncas/alerts/TA13-071A Microsoft Security Bulletin: MS13-024 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16596 Common Vulnerability Exposure (CVE) ID: CVE-2013-0083 Common Vulnerability Exposure (CVE) ID: CVE-2013-0084 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16445 Common Vulnerability Exposure (CVE) ID: CVE-2013-0085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16414
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.