NVD

Id
3892  
Name
CVE-2008-4032  
Description
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-12-10  
Modified Date
2011-03-07  
Seq
2008-4032  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24566 3892 CVE-2008-4032 oval:org.mitre.oval:def:5774  View
24567 3892 CVE-2008-4032 MS08-077  View
24568 3892 CVE-2008-4032 1021367  View
24569 3892 CVE-2008-4032 TA08-344A  View
24570 3892 CVE-2008-4032 ADV-2008-3389  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46891 JVNDB-2008-002201 Microsoft Office SharePoint Server における認証および認可の処理に関するサービス運用妨害 (DoS) の脆弱性 Microsoft Office SharePoint Server には、認証および認可の処理に不備があるため、サービス運用妨害 (DoS) または情報漏えいの脆弱性が存在します。 CVE-2008-4032 34145 CVE-2008-4032 3892 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002201.html 2008-12-09 2009-01-21 View