Signature Detail

HTTP: Microsoft SharePoint Team Information Disclosure

This signature detects attempts to exploit a known vulnerability against Microsoft SharePoint Team Services. A successful attack can lead to arbitrary information disclosure.

Extended Description

Microsoft SharePoint is prone to a vulnerability that lets attackers access certain files that contain source code. An attacker can exploit this vulnerability to retrieve certain files from the vulnerable computer in the context of the webserver process. Information obtained may aid in further attacks. SharePoint 2007 is vulnerable; other versions may also be affected.

Affected Products

• Microsoft SharePoint Server 2007
• Microsoft SharePoint Team Services from Microsoft

References

• BugTraq: 36817
• CVE: CVE-2009-3830