CVE-2013-0081

2013-09-1114:03:00

CWE-20

[email protected]

web.nvd.nist.gov

106

microsoft

sharepoint

portal server

denial of service

vulnerability

nvd

cve-2013-0081

6.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.44 Medium

EPSS

Percentile

97.3%

JSON

Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka “SharePoint Denial of Service Vulnerability.”

CPENameOperatorVersion
microsoft:sharepoint_servicesmicrosoft sharepoint serviceseq3.0
microsoft:sharepoint_foundationmicrosoft sharepoint foundationeq2010
microsoft:sharepoint_servermicrosoft sharepoint servereq2007
microsoft:sharepoint_foundationmicrosoft sharepoint foundationeq2013
microsoft:sharepoint_servermicrosoft sharepoint servereq2013
microsoft:sharepoint_servermicrosoft sharepoint servereq2010
microsoft:sharepoint_servicesmicrosoft sharepoint serviceseq2.0
microsoft:sharepoint_portal_servermicrosoft sharepoint portal servereq2003

CPE	Name	Operator	Version
microsoft:sharepoint_services	microsoft sharepoint services	eq	3.0
microsoft:sharepoint_foundation	microsoft sharepoint foundation	eq	2010
microsoft:sharepoint_server	microsoft sharepoint server	eq	2007
microsoft:sharepoint_foundation	microsoft sharepoint foundation	eq	2013
microsoft:sharepoint_server	microsoft sharepoint server	eq	2013
microsoft:sharepoint_server	microsoft sharepoint server	eq	2010
microsoft:sharepoint_services	microsoft sharepoint services	eq	2.0
microsoft:sharepoint_portal_server	microsoft sharepoint portal server	eq	2003