Microsoft SharePoint XML Handling Remote File Disclosure Vulnerability

Bugtraq ID:	49511
Class:	Access Validation Error
CVE:	CVE-2011-1892
Remote:	Yes
Local:	No
Published:	Sep 13 2011 12:00AM
Updated:	Sep 15 2011 06:11PM
Credit:	Nicolas Grégoire of Agarri
Vulnerable:	Microsoft SharePoint Workspace 2010 SP1 Microsoft SharePoint Workspace 2010 0 Microsoft SharePoint Services 64-bit 3.0 SP2 Microsoft SharePoint Services 3.0 SP2 Microsoft SharePoint Server 2010 Standard Edition 0 Microsoft SharePoint Server 2010 Enterprise Edition 0 Microsoft SharePoint Server 2010 SP1 Microsoft SharePoint Server 2007 x64 SP2 Microsoft SharePoint Server 2007 SP2 Microsoft SharePoint Foundation 2010 0 Microsoft Office Web Apps 2010 SP1 Microsoft Office Web Apps 2010 0 Microsoft Office Groove Management Server 2007 SP2 Microsoft Office Groove Data Bridge Server 2007 SP2 Microsoft Office Forms Server 2007 SP2 Microsoft Groove Server 2010 SP1 Microsoft Groove Server 2010 0 Microsoft Groove 2007 SP2
Not Vulnerable:

Microsoft SharePoint XML Handling Remote File Disclosure Vulnerability

Microsoft SharePoint is prone to a vulnerability that lets attackers access local files.

An attacker can exploit this vulnerability to retrieve local files from a vulnerable computer in the context of the vulnerable service. Information obtained may aid in further attacks.

Microsoft SharePoint XML Handling Remote File Disclosure Vulnerability

Exploit files are available. Please see the references for information.

Microsoft SharePoint XML Handling Remote File Disclosure Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.


Microsoft Office Groove Data Bridge Server 2007 SP2

• Microsoft Security Update for Microsoft Office Groove Server 2007 (KB2552999)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 343

Microsoft SharePoint Foundation 2010 0

• Microsoft Security Update for Office SharePoint Foundation 2010 (KB2494001)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 391

Microsoft Office Web Apps 2010 SP1

• Microsoft Security Update for Microsoft 2010 Word Web Application (KB2566450)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 367


• Microsoft Security Update for Microsoft Office Web Apps 2010 (KB2566449)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 366

Microsoft SharePoint Server 2007 SP2

• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB2508964), 32-Bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 382


• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB2553001), 32-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 340


• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB2553002), 32-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 362


• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB2553003), 32-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 388

Microsoft SharePoint Server 2010 SP1

• Microsoft Security Update for Microsoft Office SharePoint Server 2010 (KB2494022)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 323


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2560885)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 328


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566456)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 371


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566954)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 381


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566958)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 306


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566960)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 380

Microsoft SharePoint Workspace 2010 0

• Microsoft Security Update for Microsoft SharePoint Workspace 2010 (KB2566445), 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=f6ee7e43-9da9 -4b96-abd0-390cfcacb885


• Microsoft Security Update for Microsoft SharePoint Workspace 2010 (KB2566445), 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=234efac1-4f09 -41f5-90a9-4a3c2e81c05e

Microsoft SharePoint Services 3.0 SP2

• Microsoft Security Update for Windows SharePoint Services 2007 (KB2493987), 32-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 333


• Microsoft Security Update for Windows SharePoint Services 2007 (KB2493987), 64-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 345

Microsoft Office Groove Management Server 2007 SP2

• Microsoft Security Update for Microsoft Office Groove Server 2007 (KB2552998)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 329

Microsoft Groove 2007 SP2

• Microsoft Security Update for Microsoft Office Groove 2007 (KB2552997)
  http://www.microsoft.com/downloads/details.aspx?familyid=5ea6192b-55e5 -4ca4-8d91-cc768ede8277

Microsoft Groove Server 2010 0

• Microsoft Security Update for Microsoft Office Groove Server 2010 (KB2508965)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 360

Microsoft Office Web Apps 2010 0

• Microsoft Security Update for Microsoft 2010 Word Web Application (KB2566450)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 367


• Microsoft Security Update for Microsoft Office Web Apps 2010 (KB2566449)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 366

Microsoft Office Forms Server 2007 SP2

• Microsoft Security Update for Microsoft Office Forms Server 2007 (KB2553005), 32-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 370


• Microsoft Security Update for Microsoft Office Forms Server 2007 (KB2553005), 64-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 368

Microsoft SharePoint Workspace 2010 SP1

• Microsoft Security Update for Microsoft SharePoint Workspace 2010 (KB2566445), 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=f6ee7e43-9da9 -4b96-abd0-390cfcacb885


• Microsoft Security Update for Microsoft SharePoint Workspace 2010 (KB2566445), 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=234efac1-4f09 -41f5-90a9-4a3c2e81c05e

Microsoft SharePoint Server 2010 Standard Edition 0

• Microsoft Security Update for Microsoft Office SharePoint Server 2010 (KB2494022)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 323


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2560885)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 328


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566456)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 371


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566954)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 381


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566958)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 306


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566960)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 380

Microsoft SharePoint Server 2010 Enterprise Edition 0

• Microsoft Security Update for Microsoft Office SharePoint Server 2010 (KB2494022)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 323


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2560885)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 328


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566456)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 371


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566954)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 381


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566958)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 306


• Microsoft Security Update for Microsoft SharePoint Server 2010 (KB2566960)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 380

Microsoft SharePoint Server 2007 x64 SP2

• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB2553001), 64-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 385


• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB2553002), 64-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 372


• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB2553003), 64-bit Edition
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 364

Microsoft Groove Server 2010 SP1

• Microsoft Security Update for Microsoft Office Groove Server 2010 (KB2508965)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 360

Microsoft SharePoint XML Handling Remote File Disclosure Vulnerability

References:

• SharePoint Server Homepage (Microsoft)
  
• XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke (Nicolas Grégoire)
  
• Microsoft Security Bulletin MS11-074 (Microsoft)
  
• Microsoft Security Bulletin MS11-074 - Important (Microsoft)