Security feature bypass

Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service Information Store service hang by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."...

CVE-2012-4791

Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service Information Store service hang by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."...

CVE-2012-4791: Improper Control of Generation of Code

Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service Information Store service hang by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."...

MS Exchange Server Remote Code Execution Vulnerabilities (2784126)

This host is missing a critical security update according to Microsoft Bulletin MS12-080. OpenVAS Vulnerability Test $Id: secpodms12-080.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2784126 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPod...

Microsoft Exchange Server Remote Code Execution Vulnerabilities (2784126)

This host is missing a critical security update according to Microsoft Bulletin MS12-080. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Exchange Server RSS Feed Remote Denial of Service Vulnerability

Description Microsoft Exchange Server is prone to a remote denial-of-service vulnerability. Successful exploits will allow attackers to cause the affected computer to become unresponsive, denying service to legitimate users. Technologies Affected Microsoft Exchange Server 2007 SP 1 Microsoft...

PT-2012-5593

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2007 SP3 through 2010 SP2 Description A denial of service issue exists due to improper handling of RSS feeds, which could cause the Information Store service to become unresponsive. This condition may lead to...

Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites

Title: ====== Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=688 VL-ID: ===== 688 Common Vulnerability Scoring System: ==================================== 4.5 Introduction:...

ME Exchange Reporter v4.1 - Multiple Web Vulnerabilities

Document Title: =============== ME Exchange Reporter v4.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=688 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 68...

ME Exchange Reporter v4.1 - Multiple Web Vulnerabilities

Document Title: =============== ME Exchange Reporter v4.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=688 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 68...

Manage Engine Exchange Reporter 4.1 Cross Site Scripting

Exploit for php platform in category local exploits Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites Introduction: ============= Microsoft Exchange Server is, by a distance, the most popular communication, collaboration and email messaging application today! MS Exchange serves a...

PT-2012-4575

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 8.3.7.0 Microsoft Exchange Server affected versions not specified Description The issue affects the availability of the system, allowing context-dependent attackers to exploit it. Remote code execution is...

Microsoft Exchange Server WebReady Document Viewing multiple security vulnerabilities

Multiple vulnerabilities in embedded Oracle Outside In technology...

Microsoft Exchange Server WebReady Document Viewing Remote Code Execution Vulnerabilities (2740358)

This host is missing a critical security update according to Microsoft Bulletin MS12-058. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-058: Vulnerability in Microsoft Exchange Server WebReady document viewing could allow remote code execution: August 14, 2012

Resolves a vulnerability in Microsoft Exchange Server WebReady Document Viewing that could allow remote code execution in the security context of the transcoding service on the Exchange server if a user previews a specially crafted file by using Outlook Web App OWA.INTRODUCTIONMicrosoft has...

PT-2012-3517

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Remote code execution issues exist due to the WebReady Document Viewing feature. This could allow code execution as Local System if a user views a specially crafted file...

Microsoft Exchange Server IMAP Command Denial of Service (MS07-026; CVE-2007-0221)

An integer overflow vulnerability has been reported in Microsoft Exchange Server...

CVE-2010-3937

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service infinite loop and MSExchangeIS outage via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."...

Design/Logic Flaw

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service infinite loop and MSExchangeIS outage via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."...

CVE-2010-3937

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service infinite loop and MSExchangeIS outage via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."...