Skip to content
OpenAdvisories
Unscored CVE-2012-2532 EUVD-2012-2518GHSA-28x5-qp9q-fqqf

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a sessio…

Published Nov 14, 2012 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."

References