Microsoft SharePoint Team Services Download Feature Source Code Information Disclosure Vulnerability

Bugtraq ID:	36817
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 26 2009 12:00AM
Updated:	Oct 26 2009 05:58PM
Credit:	Daniel Martin from NGS Software Insight Security Research
Vulnerable:	Microsoft SharePoint Team Services from Microsoft + Microsoft FrontPage 2002 - Microsoft IIS 5.0 Microsoft SharePoint Server 2007 0
Not Vulnerable:

Microsoft SharePoint Team Services Download Feature Source Code Information Disclosure Vulnerability

Microsoft SharePoint is prone to a vulnerability that lets attackers access certain files that contain source code.

An attacker can exploit this vulnerability to retrieve certain files from the vulnerable computer in the context of the webserver process. Information obtained may aid in further attacks.

SharePoint 2007 is vulnerable; other versions may also be affected.

Microsoft SharePoint Team Services Download Feature Source Code Information Disclosure Vulnerability

Attackers can exploit this vulnerability via a browser.

The following example URI is available:

http://www.example.com/_layouts/download.aspx?SourceUrl=/Pages/Default.aspx&Source=http://www.example.com/Pages/Default.aspx&FldUrl=

Microsoft SharePoint Team Services Download Feature Source Code Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft SharePoint Team Services Download Feature Source Code Information Disclosure Vulnerability

References:

• Microsoft SharePoint Homepage (Microsoft)
  
• SharePoint 2007 ASP.NET Source Code Disclosure ("Daniel Martin" )
  
• Description of SharePoint Server 2007 ASPX page source code access (Microsoft)