[SA12376] Microsoft Outlook Express "BCC:" Recipient Disclosure Weakness

TITLE: Microsoft Outlook Express "BCC:" Recipient Disclosure Weakness SECUNIA ADVISORY ID: SA12376 VERIFY ADVISORY: http://secunia.com/advisories/12376/ CRITICAL: Not critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Microsoft Outlook Express 6...

Microsoft Outlook Express information leak

Bcc: header may not be stripped for partial multipart MIME message...

Microsoft Outlook Web Access (OWA) Version Detection

Binary data 1242.prm...

Microsoft Outlook and Outlook Express Arbitrary Program Execution Vulnerability

Binary data 1290.prm...

Microsoft Outlook Express Mail Client Detection

Binary data 1332.prm...

Microsoft Outlook Express S/MIME Buffer Overflow Vulnerability

Binary data 1291.prm...

Microsoft Outlook Express for MacOS HTML Attachment Automatic Download Vulnerability

Binary data 1293.prm...

Microsoft Outlook Remote Buffer Overflow (deprecated)

Binary data 1325.prm...

Microsoft Outlook Express POP Denial of Service Vulnerability

Binary data 1292.prm...

Microsoft Outlook 98 / Outlook Express 4.x Long Filename Vulnerability

Binary data 1294.prm...

CVE-2004-0502

Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shel...

CVE-2004-0503

Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format RTF message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to...

CVE-2004-0501

Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language VML entity whose src parameter points to the remote site, which could allow remote attackers to know whe...

Outlook Express BCC: Recipient Disclosure

Binary data 2150.prm...

Outlook Express .wab File Processing Overflow

Binary data 3510.prm...

CVE-2004-0203

CVE-2004-0203 affects Outlook Web Access (OWA) for Exchange Server 5.5 SP4. The vulnerability is a cross-site scripting flaw in the HTML redirect query validation, allowing an attacker to persuade a user to click a crafted URL and execute arbitrary script in the victim’s browser, potentially spoo...

CVE-2004-0203

Cross-site scripting XSS vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query...

HTTP Response Splitting vulnerability in Microsoft Outlook Web Access for Exchange 5.5

//////////////////////////////////////////////////////////////////// //===================== Security Advisory ====================// //////////////////////////////////////////////////////////////////// -------------------------------------------------------------------- ----- Microsoft Outlook W...

Microsoft Outlook Web Access (OWA) Version Detection

Microsoft Exchange Server with Outlook Web Access OWA embeds the Exchange version number inside the default HTML web page. By requesting the default HTML page, Nessus was able to extract the Microsoft Exchange server version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Microsoft Outlook Web Access contains vulnerability in HTML redirection query

Overview A cross-site scripting vulnerability in Microsoft Exchange 5.5 Outlook Web Access OWA could allow an attacker to execute arbitrary scripting code in the victim's browser. Description Outlook Web Access OWA is a component of Microsoft Exchange. By using OWA, a server that is running...