Information disclosure

Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensiti...

CVE-2009-0958

Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensiti...

CVE-2009-0958

Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1 store an exception for a hostname after the user accepts an untrusted Exchange certificate, causing the certificate to be accepted in future use and enabling remote Exchange servers to obtain sensitive information such as credential...

多个Symantec产品RAR/TAR/ZIP文件扫描绕过漏洞

Bugraq ID: 35354 多个Symantec产品对畸形或特殊格式的压缩档文件如tar/zip/rar/缺少真确处理，可导致绕过扫描产品的检测。 攻击者构建恶意的文件，发送给目标用户，可绕过检测使应用程序展开并执行。 目前没有详细漏洞细节提供。 Symantec Symantec AntiVirus Scan Engine for Microsoft ISA 4.3.12 Symantec Symantec AntiVirus Corporate Edition 10.2 MR2 Symantec Scan Engine 5.1.6.31 Symantec Scan Engine...

Exchange Server TNEF解码内存破坏漏洞（MS09-003）

BUGTRAQ ID: 33134 CVECAN ID: CVE-2009-0098 Microsoft Exchange Server是一款企业级的邮件服务程序。 Microsoft Exchange Server解码消息的传输中性封装格式（TNEF）数据时存在内存破坏漏洞。如果用户预览了以TNEF格式发送的特制邮件消息，或Microsoft Exchange Server Information Store处理了特制的邮件消息，就可以触发这个漏洞，导致执行任意代码。 Microsoft Exchange Server 2007 SP1 Microsoft Exchange Serve...

Exchange Server EMSMDB2 MAPI命令远程拒绝服务漏洞（MS09-003）

BUGTRAQ ID: 33136 CVECAN ID: CVE-2009-0099 Microsoft Exchange Server是一款企业级的邮件服务程序。 Exchange Server的EMSMDB2提供程序没有正确地处理MAPI命令，远程攻击者可通过向使用EMSMDB32提供程序的应用发送特制的MAPI命令来利用此漏洞，导致应用程序停止响应。 这个漏洞也影响Microsoft Exchange System Attendant，因为它也使用EMSMDB32提供程序。Microsoft Exchange System Attendant是Microsoft...

Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (959239)

This host is missing a critical security update according to Microsoft Bulletin MS09-003. OpenVAS Vulnerability Test $Id: secpodms09-003.nasl 8725 2018-02-08 15:16:38Z cfischer $ Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution 959239 Authors: Chandan S Copyright c 2009...

Microsoft Security Bulletin MS09-003 - Critical Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (959239)

Microsoft Security Bulletin MS09-003 - Critical Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution 959239 Published: February 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Exchange...

Command injection

The Electronic Messaging System Microsoft Data Base EMSMDB32 provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service application outage via a malformed MAPI command, aka "Literal...

CVE-2009-0099

Summary of CVE-2009-0099 and related MS advisory : The CVE entry describes a literal processing vulnerability in the EMSMDB32 MAPI provider used by Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2 (via Exchange System Attendant) that could allow a remote attacker to cause a denial ...

Microsoft Exchange Server EMSMDB32 Literal Processing (MS09-003; CVE-2009-0099)

The Microsoft Exchange Server is an implementation of an email server capable of handling numerous Internet protocol, including the Simple Mail Transfer Protocol SMTP. The EMSMDB32 provider refers to the Exchange Transport provider which implements both a transport and a message store provider fo...

Microsoft Exchange Server TNEF Decoding Remote Code Execution Vulnerability

Description Microsoft Exchange Server is prone to a remote code-execution vulnerability. Remote attackers may exploit this issue by sending maliciously constructed TNEF-encoded email data to vulnerable servers. This issue will be triggered when a user views or previews the malicious email...

Microsoft Exchange Server MS-TNEF Memory Corruption (MS09-003; CVE-2009-0098)

The Microsoft Exchange Server is an implementation of an email server capable of handling numerous Internet protocol, including the Simple Mail Transfer Protocol SMTP. Transport Neutral Encapsulation Format TNEF is a format used by the Microsoft Exchange Server when sending messages formatted as...

Microsoft Exchange Server EMSMDB2 MAPI Command Remote Denial of Service Vulnerability

Description Microsoft Exchange Server is prone to a remote denial-of-service vulnerability. A successful exploit allows a remote attacker to cause the application to stop responding, denying service to legitimate users. Technologies Affected Avaya Messaging Application Server Avaya Messaging...

Microsoft Outlook Web Access redir.asp URI重新定向漏洞

BUGTRAQ ID: 31765 CVECAN ID: CVE-2008-1547 Microsoft Exchange Server是一款流行的邮件服务器，Outlook Web Access是Exchange中用于通过Web浏览器读取和发送邮件的工具。 Outlook Web Access的exchweb/bin/redir.asp页面存在重新定向漏洞，远程攻击者可以在邮件中发送特制的URL，如果用户已经登录的话，则点击该链接就会被立即重新定向到钓鱼网站；如果用户未登录，则点击后会显示登录页面，然后在成功认证后将用户重新定向到钓鱼网站。 Microsoft Outlook Web...

CVE-2008-1547

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter...

Open redirect

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter...

CVE-2008-1547

Summary: CVE-2008-1547 is an open redirect vulnerability in exchweb/bin/redir.asp of Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (build 6.5.7638). An attacker can lure a logged-in user to click a URL parameter that redirects to an arbitrary site, enabling phishing via the redi...

CVE-2008-1547

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter...

Microsoft Outlook Web Access for Exchange Server 2003 - 'redir.asp' Open Redirection

source: https://www.securityfocus.com/bid/31765/info Outlook Web Access is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks. OWA 6.5 SP 2 is vulnerable; other versions may also ...