CVE-2005-0820

Impact

Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://securitytracker.com/id?1013454
• http://support.microsoft.com/kb/867443
• http://www.osvdb.org/14882
• http://www.securityfocus.com/bid/12824
• http://securitytracker.com/id?1013454
• http://support.microsoft.com/kb/867443
• http://www.osvdb.org/14882
• http://www.securityfocus.com/bid/12824