Oval Definition:	oval:org.mitre.oval:def:19040
Revision Date: 2014-12-08 Version: 13 Title: MAC disabled vulnerability in Microsoft SharePoint and Microsoft Exchange Server (CVE-2013-1330) - MS13-067, MS13-105 Description: The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attackers to execute arbitrary code by leveraging an unassigned workflow, aka "MAC Disabled Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2013-1330 Platform(s): Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Exchange Server 2007 Microsoft Exchange Server 2010 Microsoft Exchange Server 2013 Microsoft SharePoint Foundation 2010 Microsoft SharePoint Server 2007 Microsoft SharePoint Server 2010 Microsoft SharePoint Services 2.0 Microsoft SharePoint Services 3.0 Definition Synopsis sharepoint services 2.0/version Microsoft Windows SharePoint Services 2.0 is installed AND Check if the version of onetutil.dll is less than 11.0.8346.0 OR sharepoint services 3.0 sp3/version Microsoft SharePoint Services 3.0 SP3 is installed AND Check if the version of Onetutil.dll is less than 12.0.6676.5000 OR foundation 2010/version Check if the version of onetutil.dll is less than 14.0.7105.5000 AND foundation 2010 sp1/sp2 Microsoft SharePoint Foundation 2010 Service Pack 1 is installed OR Microsoft SharePoint Foundation 2010 Service Pack 2 is installed OR sharepoint server 2010/version sharepoint server 2010 sp1/sp2 Microsoft SharePoint Server 2010 Service Pack 1 is installed OR Microsoft SharePoint Server 2010 Service Pack 2 is installed AND either files versions Check if the version of microsoft.office.server.native.dll is less than 14.0.7005.1000 OR Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000 OR Check if the version of xlsrv.dll is less than 14.0.7104.5000 (sharepoint server) OR web apps/version office web apps sp1/sp2 Microsoft Office Web Apps 2010 Service Pack 1 is installed OR Microsoft Office Web Apps 2010 Service Pack 2 is installed AND either file versions Check if the version of msoserver.dll is less than 14.0.7106.5000 OR Check if the version of xlsrv.dll is less than 14.0.7104.5000 (web apps) OR Exchange Server 2007 and vulnerable file version Microsoft Exchange Server 2007 SP3 is installed AND Check if the version of exsetup.exe is less than 8.3.342.4 OR Exchange Server 2010 SP2 and vulnerable file version Microsoft Exchange Server 2010 SP2 is installed AND Check if the version of exsetup.exe is less than 14.2.390.3 OR Exchange Server 2010 SP3 and vulnerable file version Microsoft Exchange Server 2010 SP3 is installed AND Check if the version of exsetup.exe is less than 14.3.174.1 OR Exchange Server 2013 CU2 and vulnerable file version Microsoft Exchange Server 2013 Cumulative Update 2 is installed AND Check if the version of exsetup.exe is less than 15.0.712.31 OR Exchange Server 2013 CU3 and vulnerable file version Microsoft Exchange Server 2013 Cumulative Update 3 is installed AND Check if the version of exsetup.exe is less than 15.0.775.41
BACK