ID CVE-2010-1264
Summary Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service (hang) via crafted requests to the Help page that cause repeated restarts of the application pool, aka "Sharepoint Help Page Denial of Service Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x32:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x32:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x64:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x64:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x32:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x32:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x64:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x64:*:*:*:*:*
CVSS
Base: 4.0 (as of 12-10-2018 - 21:57)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:S/C:N/I:N/A:P
msbulletin via4
bulletin_id MS10-039
bulletin_url
date 2010-06-08T00:00:00
impact Elevation of Privilege
knowledgebase_id 2028554
knowledgebase_url
severity Important
title Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege
oval via4
accepted 2013-11-11T04:02:58.962-05:00
class vulnerability
contributors
  • name Dragos Prisaca
    organization Symantec Corporation
  • name Dragos Prisaca
    organization G2, Inc.
  • name Chandan S
    organization SecPod Technologies
definition_extensions
  • comment Microsoft Windows Server 2003 (32-bit) is installed
    oval oval:org.mitre.oval:def:1870
  • comment Microsoft Windows Server 2003 (x64) is installed
    oval oval:org.mitre.oval:def:730
description Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service (hang) via crafted requests to the Help page that cause repeated restarts of the application pool, aka "Sharepoint Help Page Denial of Service Vulnerability."
family windows
id oval:org.mitre.oval:def:7241
status accepted
submitted 2010-06-08T13:00:00
title Sharepoint Help Page Denial of Service Vulnerability
version 30
refmap via4
bid 40559
cert TA10-159B
Last major update 12-10-2018 - 21:57
Published 08-06-2010 - 20:30
Last modified 12-10-2018 - 21:57
Back to Top