US-CERT Technical Cyber Security Alert TA06-129A -- Microsoft Windows and Exchange Server Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-129A Microsoft Windows and Exchange Server Vulnerabilities Original release date: May 9, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Microsoft Exchange Server...

Microsoft Exchange Server Calendar Remote Code Execution Vulnerability

Description Microsoft Exchange Server is prone to a vulnerability that may let attackers execute code remotely. This issue is exposed when the server handles emails that contain malicious calendar data that is included in meeting requests. If the issue is successfully exploited, this could...

Important: Red Hat Security Advisory: gnutls security update

Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The GNU TLS Library provides support for cryptographic algorithms and protocols such as TLS. GN...

Exchangepop3 v5 rcpt buffer overflow vulnerability

Author: securma massine [email protected] MorX Security Research Team http://www.morx.org Product info : EXchangepop3 is an email gateway connector that retrieves messages from Internet POP3 email accounts and delivers them to Exchange Server. Vulnerability Description: eXchangepop3 is vulnerable ...

Microsoft Exchange Server and Microsoft Outlook TNEF messages format buffer overflow

Buffer overflow on parsing TNEF format...

Input validation

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...

Microsoft Exchange Public Folders Information Leak

Microsoft Exchange Public Folders can be set to allow anonymous connections set by default. If this is not changed it is possible for an attacker to gain critical information about the users such as full email address, phone number, etc that are present in the Exchange Server. Additional...

Vulnerability in Exchange Server 5.5 Outlook Web Access XSS (842436)

The remote host is running a version of the Outlook Web Access which contains cross site scripting flaws. This vulnerability could allow an attacker to convince a user to run a malicious script. If this malicious script is run, it would execute in the security context of the user. Attempts to...

IMC SMTP EHLO Buffer Overrun

A security vulnerability results because of an unchecked buffer in the IMC code that generates the response to the EHLO protocol command. SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Vulnerability in Exchange Server 5.5 Outlook Web Access XSS (842436)

The remote host is running a version of the Outlook Web Access which contains cross site scripting flaws. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

CVE-2005-1987

CVE-2005-1987 is a remote code execution vulnerability in Microsoft Collaboration Data Objects (CDO) used by CDOSYS/CDOEX on Windows and Exchange. An unchecked buffer triggered by processing a malformed SMTP/email header (e.g., oversized Content-Type) can allow an attacker to execute arbitrary co...

Microsoft Collaboration Data Objects Remote Buffer Overflow Vulnerability

Description Microsoft CDO is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the library to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. This issue presents itself when an attacker sends a...

Microsoft Security Bulletin MS05-029 Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks (895179)

Microsoft Security Bulletin MS05-029 Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks 895179 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: System administrators who have servers that are running Outlook Web Access for...

CVE-2005-0563

Microsoft Outlook Web Access (OWA) for Exchange Server 5.5 contains a cross-site scripting (XSS) vulnerability in the HTML encoding used in Compose New Message, allowing an attacker to cause script execution in the user’s context via a specially crafted email (encoded javascript: URL in an IMG ta...

CVE-2005-0563

Cross-site scripting XSS vulnerability in Microsoft Outlook Web Access OWA component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL "jav&X41script:" in an IMG tag...

CVE-2005-0563

Cross-site scripting XSS vulnerability in Microsoft Outlook Web Access OWA component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL "jav&X41script:" in an IMG tag...

MS05-029: Vulnerability in Exchange Server 5.5 Outlook Web Access XSS (895179)

The remote host is running a version of the Outlook Web Access that is affected by a cross-site scripting flaw. This vulnerability could allow an attacker to convince a user to run a malicious script. If this malicious script is run, it would execute in the security context of the user. Attempts ...

Microsoft Exchange Server Outlook Web Access HTML Injection Vulnerability

Description Outlook Web Access is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the affected application of an unsuspecting user in...