Microsoft SharePoint Malformed SOAP Request Remote Code Execution Vulnerability

Bugtraq ID:	45264
Class:	Unknown
CVE:	CVE-2010-3964
Remote:	Yes
Local:	No
Published:	Dec 14 2010 12:00AM
Updated:	Jul 30 2012 08:41PM
Credit:	Oleksandr Mirosh, working with TippingPoint's Zero Day Initiative
Vulnerable:	Microsoft SharePoint Server 2007 x64 SP2 Microsoft SharePoint Server 2007 x64 SP1 Microsoft SharePoint Server 2007 x64 0 Microsoft SharePoint Server 2007 SP2 Microsoft SharePoint Server 2007 SP1 Microsoft SharePoint Server 2007 0
Not Vulnerable:

Microsoft SharePoint Malformed SOAP Request Remote Code Execution Vulnerability

Microsoft SharePoint is prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code within the privileges of the guest account on the SharePoint server. Failed exploit attempts will result in a denial-of-service condition.

Microsoft SharePoint Malformed SOAP Request Remote Code Execution Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/45264.rb

Microsoft SharePoint Malformed SOAP Request Remote Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the references for details.


Microsoft SharePoint Server 2007 x64 SP2

• Microsoft Office2007-kb2433089-fullfile-x64-glb.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=3db09280-24bd -42e0-9ae3-02c9bf3e8ee3

Microsoft SharePoint Server 2007 SP2

• Microsoft Office2007-kb2433089-fullfile-x86-glb.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=3c8fb9f9-7920 -43ea-b618-e26dc3360c60

Microsoft SharePoint Malformed SOAP Request Remote Code Execution Vulnerability

References:

• SharePoint Server Homepage (Microsoft)
  
• Microsoft Security Bulletin MS10-104 (Microsoft)