Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection

Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection source: https://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attack...

CVE-2004-0203

Cross-site scripting XSS vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query...

Microsoft ASP.NET 1.x - URI Canonicalization Unauthorized Web Access

Microsoft ASP.NET 1.x - URI Canonicalization Unauthorized Web Access source: https://www.securityfocus.com/bid/11342/info Microsoft ASP.NET is reported prone to a remote information-disclosure vulnerability because the application fails to properly secure documents when handling malformed URI...

Microsoft Outlook Web Access (OWA) Version Detection

Binary data 1242.prm...

CVE-2004-0203

CVE-2004-0203 affects Outlook Web Access (OWA) for Exchange Server 5.5 SP4. The vulnerability is a cross-site scripting flaw in the HTML redirect query validation, allowing an attacker to persuade a user to click a crafted URL and execute arbitrary script in the victim’s browser, potentially spoo...

CVE-2004-0203

Cross-site scripting XSS vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query...

CVE-2004-0203: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query...

HTTP Response Splitting vulnerability in Microsoft Outlook Web Access for Exchange 5.5

//////////////////////////////////////////////////////////////////// //===================== Security Advisory ====================// //////////////////////////////////////////////////////////////////// -------------------------------------------------------------------- ----- Microsoft Outlook W...

Microsoft Outlook Web Access (OWA) Version Detection

Microsoft Exchange Server with Outlook Web Access OWA embeds the Exchange version number inside the default HTML web page. By requesting the default HTML page, Nessus was able to extract the Microsoft Exchange server version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Microsoft Outlook Web Access contains vulnerability in HTML redirection query

Overview A cross-site scripting vulnerability in Microsoft Exchange 5.5 Outlook Web Access OWA could allow an attacker to execute arbitrary scripting code in the victim's browser. Description Outlook Web Access OWA is a component of Microsoft Exchange. By using OWA, a server that is running...

Microsoft Exchange Outlook Web Access HTTP Response Splitting Vulnerability

Description Microsoft Exchange Outlook Web Access OWA is prone to HTTP response splitting attacks. This issue could permit hostile script to be injected into client sessions, which could gain access to properties of the OWA server and Web pages hosted on the site. It is noted that the attacker mu...

MS04-026: Vulnerability in Exchange Server 5.5 Outlook Web Access XSS (842436)

The remote host runs Outlook Web Access. Outlook Web Access is a service for Microsoft Exchange, that provides web-based email, calendaring and contact management to end users. The remote version of Outlook Web Access is vulnerable to a cross-site scripting attack that could allow an attacker to...

CVE-2004-0668

Summary: CVE-2004-0668 affects IBM Lotus Domino Web Access, where opening a large email message via Web Access can trigger an out-of-memory condition in the Domino server, leading to a denial of service. The connected advisory CPAI-2004-155 describes the vulnerability as occurring when processing...

CVE-2004-0668: Undefined Security Weakness

Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service server crash via a large e-mail message, as demonstrated using a large image attachment...

Domino Web Access DoS

Message with large broken image causes server to crash on message reading...

IBM Lotus Domino Server 6 - Web Access Remote Denial of Service

IBM Lotus Domino Server 6 - Web Access Remote Denial of Service source: https://www.securityfocus.com/bid/10641/info Lotus Domino Server is reported prone to a remote denial of service vulnerability. The issue is reported to exist when a malicious email that is received on the affected server, is...

IBM Lotus Domino Server 6 - Web Access Remote Denial of Service

source: https://www.securityfocus.com/bid/10641/info Lotus Domino Server is reported prone to a remote denial of service vulnerability. The issue is reported to exist when a malicious email that is received on the affected server, is opened through the Domino Web Access interface by a client. A...

Microsoft Exchange Server 2003 fails to assign user credentials to proper mailbox

Overview A flaw in the authentication mechanism that Microsoft Exchange Server 2003 uses for Outlook Web Access users in some configurations could expose another user's mailbox. Description Outlook Web Access OWA is a feature of Microsoft Exchange Server 2003. By using OWA, a server that is runni...

CVE-2003-0904

Microsoft Exchange 2003 and Outlook Web Access OWA, when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Servic...

Microsoft Security Bulletin MS04-002

Microsoft Security Bulletin MS04-002 Print Vulnerability in Exchange Server 2003 Could Lead to Privilege Escalation 832759 Issued: January 13, 2004 Version: 1.0 Summary Who should read this document: System administrators who have servers that are running Microsoft® Outlook® Web Access for...