Lucene search
HistorySep 11, 2013 - 2:03 p.m.
CVE-2013-0081
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.3
Confidence
High
EPSS
0.51
Percentile
97.6%
Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka “SharePoint Denial of Service Vulnerability.”
Affected configurations
Node
microsoftsharepoint_foundationMatch2010sp1
ORmicrosoftsharepoint_foundationMatch2010sp2
ORmicrosoftsharepoint_foundationMatch2013
ORmicrosoftsharepoint_portal_serverMatch2003sp3
ORmicrosoftsharepoint_serverMatch2007sp3
ORmicrosoftsharepoint_serverMatch2010sp1
ORmicrosoftsharepoint_serverMatch2010sp2
ORmicrosoftsharepoint_serverMatch2013
ORmicrosoftsharepoint_servicesMatch2.0
ORmicrosoftsharepoint_servicesMatch3.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | sharepoint_foundation | 2010 | cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:* |
| microsoft | sharepoint_foundation | 2010 | cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:* |
| microsoft | sharepoint_foundation | 2013 | cpe:2.3:a:microsoft:sharepoint_foundation:2013:*:*:*:*:*:*:* |
| microsoft | sharepoint_portal_server | 2003 | cpe:2.3:a:microsoft:sharepoint_portal_server:2003:sp3:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2007 | cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2010 | cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2010 | cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2013 | cpe:2.3:a:microsoft:sharepoint_server:2013:*:*:*:*:*:*:* |
| microsoft | sharepoint_services | 2.0 | cpe:2.3:a:microsoft:sharepoint_services:2.0:*:*:*:*:*:*:* |
| microsoft | sharepoint_services | 3.0 | cpe:2.3:a:microsoft:sharepoint_services:3.0:*:*:*:*:*:*:* |
Related
prion
prion
Denial of service
2013-09-11 14:03:00
checkpoint_advisories
checkpoint_advisories
Microsoft SharePoint W3WP Denial of Service (MS13-067; CVE-2013-0081)
2013-09-10 00:00:00
cve
cve
CVE-2013-0081
2013-09-11 14:03:47
symantec
symantec
Microsoft SharePoint CVE-2013-0081 Denial of Service Vulnerability
2013-09-10 00:00:00
cvelist
cvelist
CVE-2013-0081
2013-09-11 10:00:00
openvas
openvas
Microsoft SharePoint Server Remote Code Execution vulnerability (2834052)
2013-09-13 00:00:00
Microsoft Office Services Remote Code Execution vulnerability (2834052)
2013-10-09 00:00:00
mskb
mskb
securityvulns
securityvulns
Microsoft Sharepoint Server multiple security vulnerabilities
2013-10-03 00:00:00
nessus
nessus
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.3
Confidence
High
EPSS
0.51
Percentile
97.6%
Related for NVD:CVE-2013-0081