Files
CVEs-PoC/2008/CVE-2008-4032.md
T
2024-06-18 02:51:15 +02:00

18 lines
914 B
Markdown

### [CVE-2008-4032](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4032)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
### POC
#### Reference
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-077
#### Github
No PoCs found on GitHub currently.