Microsoft Office SharePoint Portal Server Local Information Disclosure Weakness
BID:11878
Info
Microsoft Office SharePoint Portal Server Local Information Disclosure Weakness
| Bugtraq ID: | 11878 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 10 2004 12:00AM |
| Updated: | Dec 10 2004 12:00AM |
| Credit: | Discovery of this weakness is credited to Alexander Fichman. |
| Vulnerable: |
Microsoft SharePoint Portal Server 2001 SP3 Microsoft SharePoint Portal Server 2001 SP2A Microsoft SharePoint Portal Server 2001 SP2 Microsoft SharePoint Portal Server 2001 SP1 Microsoft SharePoint Portal Server 2001 Microsoft SharePoint Portal Server SP3 Microsoft SharePoint Portal Server 2003 |
| Not Vulnerable: | |
Discussion
Microsoft Office SharePoint Portal Server Local Information Disclosure Weakness
Microsoft Office SharePoint Portal Server is reported prone to a local information disclosure weakness. The vulnerability presents itself when SharePoint Portal Server components are being installed by a user account that employs a password credential containing a prefixed '-' character.
Under these circumstances the SharePoint Portal Server component installation will fail and the password for the user account used to install the software will be logged to the following file:
'%WinDir%\temp\STSADM.log-setup_{date} {time}.log'.
A local attacker may peruse the aforementioned log files in the hopes that they contain the password of a target user.
Microsoft Office SharePoint Portal Server is reported prone to a local information disclosure weakness. The vulnerability presents itself when SharePoint Portal Server components are being installed by a user account that employs a password credential containing a prefixed '-' character.
Under these circumstances the SharePoint Portal Server component installation will fail and the password for the user account used to install the software will be logged to the following file:
'%WinDir%\temp\STSADM.log-setup_{date} {time}.log'.
A local attacker may peruse the aforementioned log files in the hopes that they contain the password of a target user.
Exploit / POC
Microsoft Office SharePoint Portal Server Local Information Disclosure Weakness
No exploit is required.
No exploit is required.
Solution / Fix
Microsoft Office SharePoint Portal Server Local Information Disclosure Weakness
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft Office SharePoint Portal Server Local Information Disclosure Weakness
References:
References:
- Technet Security (Microsoft)