CVE-2008-1547

Summary: CVE-2008-1547 is an open redirect vulnerability in exchweb/bin/redir.asp of Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (build 6.5.7638). An attacker can lure a logged-in user to click a URL parameter that redirects to an arbitrary site, enabling phishing via the redi...

CVE-2007-0213

CVE-2007-0213 is a remote code execution vulnerability in Microsoft Exchange Server (2000 SP3, 2003 SP1/SP2, and 2007) caused by improper handling of base64-encoded MIME content. An attacker can exploit this by sending a crafted MIME email that triggers memory corruption/decoding issues, gaining ...

CVE-2008-2248

CVE-2008-2248 is a cross-site scripting vulnerability in Outlook Web Access (OWA) for Microsoft Exchange Server 2003 SP2. The flaw stems from insufficient validation of HTML when rendering emails, enabling an attacker to inject script or HTML via unspecified HTML in messages and potentially perfo...

CVE-2004-0574

CVE-2004-0574 affects the NNTP component in Windows NT 4.0 Server, Windows 2000 Server, Windows Server 2003, Exchange 2000/2003, enabling remote code execution via XPAT pattern handling. The issue stems from improper length validation and unchecked buffers, leading to off-by-one and heap-based ov...

CVE-2004-0840

CVE-2004-0840 describes a remote code execution vulnerability in the SMTP component of Microsoft Windows XP 64‑Bit Edition, Windows Server 2003 (and 64‑Bit) and the Exchange Routing Engine of Exchange Server 2003. The issue is a buffer/length handling flaw triggered by malicious DNS responses dur...

CVE-2010-0024

The CVEs concern the Windows SMTP service (smtpsvc.dll) used by Microsoft Windows 2000 SP4, Windows XP SP3, Windows Server 2003 SP2, Windows Server 2008 SP2/R2, Exchange Server 2003 SP3, Exchange Server 2007 SP2, and Exchange Server 2010. CVE-2010-0024 describes a flaw in parsing DNS MX records t...

CVE-2009-0098

CVE-2009-0098 describes a memory corruption vulnerability in Microsoft Exchange Server (2000 SP3, 2003 SP2, 2007 SP1) where TNEF message properties are not interpreted correctly, allowing remote code execution via a crafted TNEF message. Microsoft published MS09-003 detailing the vulnerability an...

CVE-2010-1690

CVE-2010-1690 describes a DNS spoofing vulnerability in the Windows SMTP/Exchange DNS handling: smtpsvc.dll before 6.0.2600.5949 does not verify that DNS response transaction IDs match the corresponding query IDs, enabling potential MITM spoofing of DNS responses. Affected products span Windows 2...

CVE-2005-0420

The CVE-2005-0420 entry concerns Microsoft Outlook Web Access (OWA) for Exchange. The connected OpenVAS NASL detail shows a concrete vulnerability in OWA 2003 where lack of sanitization of user input enables URL injection via owalogon.asp, allowing a remote attacker to cause a user to be redirect...

CVE-2010-0025

Technical details for CVE-2010-0025 are not provided in the connected documents; only related DNS spoofing CVEs are present. Monitor for updates.

CVE-2010-1689

The Red Hat and NVD entries confirm concrete details for CVE-2010-1689 and CVE-2010-1690: the DNS handling in smtpsvc.dll on Windows and Exchange product lines prior to specific builds uses predictable DNS transaction IDs (CVE-2010-1689) and does not verify that response IDs match queries (CVE-20...

CVE-2008-2247

CVE-2008-2247 is a cross-site scripting vulnerability in Outlook Web Access (OWA) for Microsoft Exchange Server 2003 SP2. The flaw arises from insufficient validation of e-mail fields when opening mail within an OWA client, allowing an attacker to inject arbitrary script and potentially elevate p...

CVE-2009-0099

Summary of CVE-2009-0099 and related MS advisory : The CVE entry describes a literal processing vulnerability in the EMSMDB32 MAPI provider used by Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2 (via Exchange System Attendant) that could allow a remote attacker to cause a denial ...

CVE-2005-0560

CVE-2005-0560 describes a heap-based buffer overflow in the SvrAppendReceivedChunk function of xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003. The overflow is triggered by a crafted X-LINK2STATE extended verb, potentially allowing remote code execution with the server’s privile...

CVE-2007-0039

CVE-2007-0039 describes a Denial of Service vulnerability in Microsoft Exchange Server caused by malformed iCal handling in the EXCDO component. The issue occurs when parsing iCal data with multiple X-MICROSOFT-CDO-MODPROPS properties; if a second MODPROPS entry is longer than the first, a NULL p...

CVE-2006-0027

CVE-2006-0027 describes a remote code execution vulnerability in Microsoft Exchange Server triggered by specially crafted vCal/iCal properties in email messages. Public sources (MS06-019) document a heap overflow in MODPROP handling within VCAL requests as the underlying root cause. Affected prod...

CVE-2003-0904

Summary: CVE-2003-0904 affects Microsoft Exchange Server 2003 with Outlook Web Access (OWA) when NTLM is used. A flaw in HTTP connection reuse between front-end and back-end servers (NTLM-authenticated OWA) can cause a user to be connected to another user’s mailbox if Kerberos is disabled or fall...

CVE-2005-0738

CVE-2005-0738 affects Microsoft Exchange Server 2003 SP1. The vulnerability is a stack consumption issue in the Information Store (Store.exe) caused by processing folders with deeply nested subfolders, leading to a denial-of-service (hang) due to a large number of recursive calls. This is the exp...

CVE-2007-0220

CVE-2007-0220 is a cross-site scripting vulnerability in Outlook Web Access (OWA) of Microsoft Exchange Server 2000 SP3 and Exchange Server 2003 SP1/SP2. The issue arises from an incorrectly handled UTF character set label, allowing remote attackers to run scripts, spoof content, or access inform...