CVE-2012-2532

Published: Nov 14, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."

Affected (2)

Products: Microsoft: Ftp Service

Microsoft

1 product

Ftp Service

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Ftp Service	Version 7.0

Configuration B

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Microsoft Ftp Service	Version 7.5

Running on/with	Platform Versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Vista	All versions

Configuration C

8 platform

Running on/with	Platform Versions
Microsoft Windows 7	All versions
Microsoft Windows 7	All versions
Microsoft Windows 7	All versions
Microsoft Windows 7	All versions
Microsoft Windows Server 2008	Version r2
Microsoft Windows Server 2008	Version r2
Microsoft Windows Server 2008	Version r2 sp1
Microsoft Windows Server 2008	Version r2 sp1