MS.Office.Sharepoint.Server.Privilege

NameMS.Office.Sharepoint.Server.Privilege.Elevation
Release DateDec 12, 2008
SeverityMedium
ImpactPrivilege Elevation.
DescriptionThis indicates an attempt to exploit a vulnerability in Microsoft Office SharePoint server.

The vulnerability is caused by insufficient privilege checkings. It could allow a remote attacker to search data that he/she is not supposed to have access to and see the search results.
Affected ProductsMicrosoft Office SharePoint Server 2007
Microsoft Search Server 2008
Recommended ActionsApply a patch, available from the web site:
http://www.microsoft.com/technet/security/Bulletin/MS08-077.mspx
Common Vulnerabilities and Exposures (CVE)http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-4032
Microsoft Bulletin IDMS08-077   http://www.microsoft.com/technet/security/Bulletin/MS08-077.mspx
Reference: VID-16733