PT-2005-1849 · Microsoft · Office Infopath 2003 Sp1

Published 2005-03-20 · Updated 2008-09-05 · CVE-2005-0820

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office InfoPath 2003 SP1

Description The issue allows attackers to obtain sensitive information, including printer and network details, database name, username, password, or the internal web server name, due to the inclusion of this information in the Manifest.xsf file in a custom .xsn form.

Recommendations For Microsoft Office InfoPath 2003 SP1, consider removing or securing sensitive information from the Manifest.xsf file in custom .xsn forms to prevent unauthorized access.

Fix

Related Identifiers

CVE-2005-0820

Affected Products

Office Infopath 2003 Sp1

References · 5

• http://support.microsoft.com/kb/867443 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0820 · Security Note
• http://securitytracker.com/id?1013454 · Note
• http://securityfocus.com/bid/12824 · Note
• http://osvdb.org/14882 · Note