CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Vulnerability Details : CVE-2011-1892

Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, and Office Web Apps 2010 Gold and SP1 do not properly handle Web Parts containing XML classes referencing external entities, which allows remote authenticated users to read arbitrary files via a crafted XML and XSL file, aka "SharePoint Remote File Disclosure Vulnerability."
Publish Date : 2011-09-15 Last Update Date : 2012-02-13
Collapse All   Expand All   Select   Select&Copy  
Related Tweets   Even more tweets   Search Twitter   Search YouTube   Search Google

- CVSS Scores & Vulnerability Types

Cvss Score
4.0
Confidentiality Impact Partial (There is considerable informational disclosure.)
Integrity Impact None (There is no impact to the integrity of the system)
Availability Impact None (There is no impact to the availability of the system.)
Access Complexity Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication Single system (The vulnerability requires an attacker to be logged into the system (such as at a command line or via a desktop session or web interface).)
Gained Access None
Vulnerability Type(s) Obtain Information
CWE ID 200

- Related OVAL Definitions

Title Definition Id Class Family
SharePoint Remote File Disclosure Vulnerability oval:org.mitre.oval:def:12907 windows
OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify a vulnerability or a missing patch. Check out the OVAL definitions if you want to learn what you should do to verify a vulnerability.

- Products Affected By CVE-2011-1892

# Product Type Vendor Product Version Update Edition Language
1 Application Microsoft Forms Server 2007 SP2 X32 Details Vulnerabilities
2 Application Microsoft Forms Server 2007 SP2 X64 Details Vulnerabilities
3 Application Microsoft Groove 2007 SP2 Details Vulnerabilities
4 Application Microsoft Groove Data Bridge Server 2007 SP2 Details Vulnerabilities
5 Application Microsoft Groove Management Server 2007 SP2 Details Vulnerabilities
6 Application Microsoft Groove Server 2010 Details Vulnerabilities
7 Application Microsoft Groove Server 2010 SP1 Details Vulnerabilities
8 Application Microsoft Office Web Apps 2010 SP1 Details Vulnerabilities
9 Application Microsoft Office Web Apps 2010 Details Vulnerabilities
10 Application Microsoft Sharepoint Foundation 2010 Details Vulnerabilities
11 Application Microsoft Sharepoint Server 2007 SP2 X32 Details Vulnerabilities
12 Application Microsoft Sharepoint Server 2007 SP2 X64 Details Vulnerabilities
13 Application Microsoft Sharepoint Server 2010 Details Vulnerabilities
14 Application Microsoft Sharepoint Server 2010 SP1 Details Vulnerabilities
15 Application Microsoft Sharepoint Services 3.0 SP2 X32 Details Vulnerabilities
16 Application Microsoft Sharepoint Services 3.0 SP2 X64 Details Vulnerabilities
17 Application Microsoft Sharepoint Workspace 2010 X64 Details Vulnerabilities
18 Application Microsoft Sharepoint Workspace 2010 SP1 X32 Details Vulnerabilities
19 Application Microsoft Sharepoint Workspace 2010 SP1 X64 Details Vulnerabilities
20 Application Microsoft Sharepoint Workspace 2010 X32 Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor Product Vulnerable Versions
Microsoft Forms Server 2
Microsoft Groove 1
Microsoft Groove Data Bridge Server 1
Microsoft Groove Management Server 1
Microsoft Groove Server 2
Microsoft Office Web Apps 2
Microsoft Sharepoint Foundation 1
Microsoft Sharepoint Server 4
Microsoft Sharepoint Services 2
Microsoft Sharepoint Workspace 4

- References For CVE-2011-1892

http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CERT TA11-256A
http://securityreason.com/securityalert/8386
SREASON 8386
http://technet.microsoft.com/en-us/security/bulletin/MS11-074
MS MS11-074

- Metasploit Modules Related To CVE-2011-1892

There are not any metasploit modules related to this vulnerability (Please visit www.metasploit.com for more information)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.