2636 matches found
Exploit Labs Security Advisory 2005.1
------------------------------------------------------------ - EXPL-A-2005-001 exploitlabs.com Advisory 030 - ------------------------------------------------------------ - Microsoft Outlook Web Access - OVERVIEW ======== A vulnerability in Microsoft Outlook Web Access allows malicious attackers ...
CVE-2005-0420
The CVE-2005-0420 entry concerns Microsoft Outlook Web Access (OWA) for Exchange. The connected OpenVAS NASL detail shows a concrete vulnerability in OWA 2003 where lack of sanitization of user input enables URL injection via owalogon.asp, allowing a remote attacker to cause a user to be redirect...
CVE-2005-0420
Microsoft Outlook Web Access OWA, when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application...
CVE-2005-0420: URL Redirection to Untrusted Site
Microsoft Outlook Web Access OWA, when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application...
Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection
Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection source: https://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attack...
Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection
source: https://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attacker may leverage this issue to carry out convincing phishing attacks...
CVE-2004-0203
Cross-site scripting XSS vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query...
Microsoft ASP.NET 1.x - URI Canonicalization Unauthorized Web Access
Microsoft ASP.NET 1.x - URI Canonicalization Unauthorized Web Access source: https://www.securityfocus.com/bid/11342/info Microsoft ASP.NET is reported prone to a remote information-disclosure vulnerability because the application fails to properly secure documents when handling malformed URI...
Microsoft Outlook Web Access (OWA) Version Detection
Binary data 1242.prm...
CVE-2004-0203
CVE-2004-0203 affects Outlook Web Access (OWA) for Exchange Server 5.5 SP4. The vulnerability is a cross-site scripting flaw in the HTML redirect query validation, allowing an attacker to persuade a user to click a crafted URL and execute arbitrary script in the victim’s browser, potentially spoo...
CVE-2004-0203
Cross-site scripting XSS vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query...
CVE-2004-0203: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query...
HTTP Response Splitting vulnerability in Microsoft Outlook Web Access for Exchange 5.5
//////////////////////////////////////////////////////////////////// //===================== Security Advisory ====================// //////////////////////////////////////////////////////////////////// -------------------------------------------------------------------- ----- Microsoft Outlook W...
Microsoft Outlook Web Access (OWA) Version Detection
Microsoft Exchange Server with Outlook Web Access OWA embeds the Exchange version number inside the default HTML web page. By requesting the default HTML page, Nessus was able to extract the Microsoft Exchange server version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Microsoft Outlook Web Access contains vulnerability in HTML redirection query
Overview A cross-site scripting vulnerability in Microsoft Exchange 5.5 Outlook Web Access OWA could allow an attacker to execute arbitrary scripting code in the victim's browser. Description Outlook Web Access OWA is a component of Microsoft Exchange. By using OWA, a server that is running...
Microsoft Exchange Outlook Web Access HTTP Response Splitting Vulnerability
Description Microsoft Exchange Outlook Web Access OWA is prone to HTTP response splitting attacks. This issue could permit hostile script to be injected into client sessions, which could gain access to properties of the OWA server and Web pages hosted on the site. It is noted that the attacker mu...
MS04-026: Vulnerability in Exchange Server 5.5 Outlook Web Access XSS (842436)
The remote host runs Outlook Web Access. Outlook Web Access is a service for Microsoft Exchange, that provides web-based email, calendaring and contact management to end users. The remote version of Outlook Web Access is vulnerable to a cross-site scripting attack that could allow an attacker to...
CVE-2004-0668
Summary: CVE-2004-0668 affects IBM Lotus Domino Web Access, where opening a large email message via Web Access can trigger an out-of-memory condition in the Domino server, leading to a denial of service. The connected advisory CPAI-2004-155 describes the vulnerability as occurring when processing...
CVE-2004-0668: Undefined Security Weakness
Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service server crash via a large e-mail message, as demonstrated using a large image attachment...