Microsoft SharePoint Server Unauthorized Access Vulnerability

Bugtraq ID:	32638
Class:	Access Validation Error
CVE:	CVE-2008-4032
Remote:	Yes
Local:	No
Published:	Dec 09 2008 12:00AM
Updated:	Dec 10 2008 06:31PM
Credit:	Anonymous
Vulnerable:	Microsoft SharePoint Server 2007 x64 SP1 Microsoft SharePoint Server 2007 x64 0 Microsoft SharePoint Server 2007 SP1 Microsoft SharePoint Server 2007 0
Not Vulnerable:

Microsoft SharePoint Server Unauthorized Access Vulnerability

Microsoft SharePoint Server is prone to a vulnerability that could let remote attackers gain unauthorized access. A successful exploit will let attackers access certain administrative functions of the SharePoint Server.

Microsoft SharePoint Server Unauthorized Access Vulnerability

This vulnerability can be exploited via a web browser.

Microsoft SharePoint Server Unauthorized Access Vulnerability

Solution:
Microsoft has released a security bulletin and fixes to address this vulnerability.


Microsoft SharePoint Server 2007 x64 0

• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB956716), 64-bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=a7fda284-273c -42ab-8188-433beaacca86

Microsoft SharePoint Server 2007 x64 SP1

• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB956716), 64-bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=a7fda284-273c -42ab-8188-433beaacca86

Microsoft SharePoint Server 2007 SP1

• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB956716), 32 bit-Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=f8f73997-6f4c -4b43-aa50-5c8276e83d3e

Microsoft SharePoint Server Unauthorized Access Vulnerability

References:

• Microsoft SharePoint Homepage (Microsoft)
  
• Microsoft Security Bulletin MS08-077 (Microsoft)