Microsoft Outlook Web Access Remote Script Injection Vulnerability
BID:23806
Info
Microsoft Outlook Web Access Remote Script Injection Vulnerability
| Bugtraq ID: | 23806 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-0220 |
| Remote: | Yes |
| Local: | No |
| Published: | May 08 2007 12:00AM |
| Updated: | May 31 2019 10:00PM |
| Credit: | Martijn Brinkers of Izecom is credited with the discovery of this vulnerability. |
| Vulnerable: |
Microsoft Outlook Web Access for Exchange Server 2003 Microsoft Outlook Web Access for Exchange 2000 Server Microsoft Exchange Server 2003 SP2 Microsoft Exchange Server 2003 SP1 Microsoft Exchange Server 2003 Microsoft Exchange Server 2000 SP3 Microsoft Exchange Server 2000 SP2 Microsoft Exchange Server 2000 SP1 Microsoft Exchange Server 2000 Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server 0 |
| Not Vulnerable: | |
Discussion
Microsoft Outlook Web Access Remote Script Injection Vulnerability
Microsoft Outlook Web Access is prone to a script-injection vulnerability because the application fails to properly handle specially crafted email attachments.
To exploit this issue, attackers must send specially crafted files through email messages to users of the affected application. When users open the file, attacker-supplied script code will be executed in the context of the affected website.
Successful exploits allow attackers to access Outlook Web Access sessions with the privileges of the targeted user. As a result, attackers may be able to obtain sensitive information and send, modify, or delete email; other attacks are also possible.
Microsoft Outlook Web Access is prone to a script-injection vulnerability because the application fails to properly handle specially crafted email attachments.
To exploit this issue, attackers must send specially crafted files through email messages to users of the affected application. When users open the file, attacker-supplied script code will be executed in the context of the affected website.
Successful exploits allow attackers to access Outlook Web Access sessions with the privileges of the targeted user. As a result, attackers may be able to obtain sensitive information and send, modify, or delete email; other attacks are also possible.
Exploit / POC
Microsoft Outlook Web Access Remote Script Injection Vulnerability
Attackers exploit this issue by sending specially crafted email messages containing script code.
Attackers exploit this issue by sending specially crafted email messages containing script code.
Solution / Fix
Microsoft Outlook Web Access Remote Script Injection Vulnerability
Solution:
The vendor has released an advisory along with updates to address this issue. Please see the referenced advisory for more information.
Microsoft Exchange Server 2000 SP3
Microsoft Exchange Server 2000 SP2
Microsoft Exchange Server 2003 SP1
Microsoft Exchange Server 2000 SP1
Microsoft Exchange Server 2003 SP2
Microsoft Exchange Server 2000
Solution:
The vendor has released an advisory along with updates to address this issue. Please see the referenced advisory for more information.
Microsoft Exchange Server 2000 SP3
-
Microsoft Security Update for Exchange 2000 Server (KB931832)
http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157
Microsoft Exchange Server 2000 SP2
-
Microsoft Security Update for Exchange 2000 Server (KB931832)
http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157
Microsoft Exchange Server 2003 SP1
-
Microsoft Security Update for Exchange Server 2003 SP1 (KB931832)
http://www.microsoft.com/downloads/details.aspx?familyid=5E7939BE-73D1 -461C-8C79-EDDB0F1459FC
Microsoft Exchange Server 2000 SP1
-
Microsoft Security Update for Exchange 2000 Server (KB931832)
http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157
Microsoft Exchange Server 2003 SP2
-
Microsoft Security Update for Exchange Server 2003 SP2 (KB931832)
http://www.microsoft.com/downloads/details.aspx?familyid=1ABF93DA-D765 -4876-96B5-ACB2D2A48F8F
Microsoft Exchange Server 2000
-
Microsoft Security Update for Exchange 2000 Server (KB931832)
http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157
References
Microsoft Outlook Web Access Remote Script Injection Vulnerability
References:
References:
- Exchange Server Home Page (Microsoft)
- ASA-2007-191 MS07-026 Vulnerabilities in Microsoft Exchange Could Allow Remote C (Avaya)
- Microsoft Security Bulletin MS07-026 (Microsoft)
- Vulnerability Note VU#124113 (US-CERT)