Microsoft Exchange OWA Server Resource Starvation Vulnerability
BID:3368
Info
Microsoft Exchange OWA Server Resource Starvation Vulnerability
| Bugtraq ID: | 3368 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 26 2001 12:00AM |
| Updated: | Sep 26 2001 12:00AM |
| Credit: | Discovery credited to Joao Gouveia. |
| Vulnerable: |
Microsoft Exchange Server 2000 SP1 Microsoft Exchange Server 2000 |
| Not Vulnerable: | |
Discussion
Microsoft Exchange OWA Server Resource Starvation Vulnerability
Outlook Web Access is an optional component of Microsoft Exchange Server which runs in conjunction with Microsoft Internet Information Server. It provides access to a user's Exchange mailbox through a web interface.
When processing client access requests, OWA Server does not place limits on folder depth. Remote attackers can exploit this to cause a denial of service by requesting access to complex folder structures (which need not exist). The CPU and memory consumed while processing these requests may result in a denial of service on the server.
Outlook Web Access is an optional component of Microsoft Exchange Server which runs in conjunction with Microsoft Internet Information Server. It provides access to a user's Exchange mailbox through a web interface.
When processing client access requests, OWA Server does not place limits on folder depth. Remote attackers can exploit this to cause a denial of service by requesting access to complex folder structures (which need not exist). The CPU and memory consumed while processing these requests may result in a denial of service on the server.
Exploit / POC
Microsoft Exchange OWA Server Resource Starvation Vulnerability
This can be exploited with a web browser.
This can be exploited with a web browser.
Solution / Fix
Microsoft Exchange OWA Server Resource Starvation Vulnerability
Solution:
Microsoft has released a patch (note that you must apply Exchange 2000 Server Service Pack 1 before applying the patch):
Microsoft Exchange Server 2000 SP1
Solution:
Microsoft has released a patch (note that you must apply Exchange 2000 Server Service Pack 1 before applying the patch):
Microsoft Exchange Server 2000 SP1
References
Microsoft Exchange OWA Server Resource Starvation Vulnerability
References:
References:
- Microsoft Technet Security (Microsoft)
- MS01-049: Deeply-nested OWA Request Can Consume Server CPU Availability (Microsoft)