PT-2005-1849 · Microsoft · Office Infopath 2003 Sp1

Publicado 2005-03-20 · Atualizado 2008-09-05 · CVE-2005-0820

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office InfoPath 2003 SP1

Description The issue allows attackers to obtain sensitive information, including printer and network details, database name, username, password, or the internal web server name, due to the inclusion of this information in the Manifest.xsf file in a custom .xsn form.

Recommendations For Microsoft Office InfoPath 2003 SP1, consider removing or securing sensitive information from the Manifest.xsf file in custom .xsn forms to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2005-0820

Produtos afetados

Office Infopath 2003 Sp1

Referências · 5

• http://securitytracker.com/id?1013454 · Nota
• http://securityfocus.com/bid/12824 · Nota
• http://support.microsoft.com/kb/867443 · Aviso do Fabricante
• http://osvdb.org/14882 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0820 · Nota de Segurança