CVE-2012-2532

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."

• CWE-200

• http://www.securityfocus.com/bid/56440Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-073
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15786Third Party Advisory
• http://www.securityfocus.com/bid/56440Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-073
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15786Third Party Advisory

Published

Nov 14, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2526The Remote Desktop Protocol (RDP) implementation in Microsof…
• CVE-2012-2527Use-after-free vulnerability in win32k.sys in the kernel-mod…
• CVE-2012-2528Use-after-free vulnerability in Microsoft Word 2003 SP3, 200…
• CVE-2012-2529Integer overflow in the kernel in Microsoft Windows XP SP2 a…
• CVE-2012-2530Use-after-free vulnerability in win32k.sys in the kernel-mod…
• CVE-2012-2531Microsoft Internet Information Services (IIS) 7.5 uses weak …
• CVE-2012-2533Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-2534Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-2535Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-2536Cross-site scripting (XSS) vulnerability in Microsoft System…
• CVE-2012-2537Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-2538Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…