CVE-2008-4032
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not...
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
- Record
CVE-2008-4032- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
- Record
CVE-2008-4032- Updated
- 2026-11-02
EUVDEUVD-2008-4017 No score
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
- Record
EUVD-2008-4017- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-49vg-6g45-5h6j No score
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not...
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
- Record
GHSA-49vg-6g45-5h6j- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4032 is a high vulnerability (CVSS 7.5) in Microsoft Office Sharepoint Server, published December 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 47.9%, the 98th percentile. No source names a fixed version.
References
securitytracker.com/id?1021367
vupen.com/english/advisories/2008/3389
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5774
secunia.com/advisories/33063
us-cert.gov/cas/techalerts/TA08-344A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-077
nvd.nist.gov/vuln/detail/CVE-2008-4032
github.com/advisories/GHSA-49vg-6g45-5h6j