CVEvulnerability
CVE-2009-3830
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-10-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
Affected configurations
• microsoft sharepoint server 2007
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://support.microsoft.com/kb/976829 Vendor Advisory
- http://www.securityfocus.com/archive/1/507419/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/36817 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53955 exchange.xforce.ibmcloud.com
- http://support.microsoft.com/kb/976829 Vendor Advisory
- http://www.securityfocus.com/archive/1/507419/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/36817 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53955 exchange.xforce.ibmcloud.com