[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

247085

 
 

909

 
 

194218

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Multiple vulnerabilities in Microsoft Internet Information Services - MS12-073

ID: oval:org.secpod.oval:def:7907Date: (C)2012-11-16   (M)2022-10-10
Class: PATCHFamily: windows




The host is missing a critical security update according to Microsoft security bulletin, MS12-073. The update is required to fix multiple vulnerabilities. The flaws are present in Internet Information Services (IIS), which fails to properly handle specially crafted FTP commands. Successful exploitation could allow information disclosure if an attacker sends specially crafted FTP commands to the server.

Platform:
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Product:
Microsoft Internet Information Services 7.0
Microsoft Internet Information Services 7.5
Reference:
MS12-073
CVE-2012-2531
CVE-2012-2532
CVE    2
CVE-2012-2531
CVE-2012-2532
CPE    16
cpe:/o:microsoft:windows_server_2008:r2:sp1:x64
cpe:/o:microsoft:windows_7::sp1:x64
cpe:/o:microsoft:windows_7::sp1:x86
cpe:/o:microsoft:windows_vista::sp2:x64
...
XCCDF    5
xccdf_com.secpod_benchmark_microsoft-windows-server-2008
xccdf_com.secpod_benchmark_microsoft-windows-7
xccdf_com.secpod_benchmark_microsoft-windows-server-2008-r2
xccdf_scaprepo.com_benchmark_microsoft-windows-server-2008-r2
...

© SecPod Technologies