Re: Exchange Public Folders Information Leakage

From: Russ (Russ.Cooper@RC.ON.CA)
Date: 09/07/01


Message-ID:  <E9A01F52DC939448BBDE44ED2E1C468F1CA212@muskie.rc.on.ca>
Date:         Fri, 7 Sep 2001 16:19:41 -0400
From: Russ <Russ.Cooper@RC.ON.CA>
Subject:      Re: Exchange Public Folders Information Leakage
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM


-----BEGIN PGP SIGNED MESSAGE-----

Several people have written in to provide a correction to the
SecuriTeam security advisory regarding MS01-047.

Microsoft Exchange Server itself is not affected.

Microsoft Outlook Web Access for Exchange Server 5.5 *only* is
affected.

Doesn't matter if OWA is running on IIS 4.0 or IIS 5.0.

My apologies for not getting a corrected (or more accurate) version
from SecuriTeam prior to posting.

Cheers,
Russ - NTBugtraq Editor

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.2

iQCVAwUBO5kr3RBh2Kw/l7p5AQHwqgP/azfgU85Qs1Hd2lizmMAm1YflErNx164/
2/7n95y6mETwLyWkCO2gF9ok3uVUs9w+NU/vcNRw0hPJpLhuZg72vneCcU8C0CYv
K+wSL0FnMncqX+bBh/6l2dl2+LppsPdOVxg95Ci7dW+SRLqhG8sUjNFiTz4jTsj9
TpUrt/S/ANI=
=/+xp
-----END PGP SIGNATURE-----

============================================================================
Delivery co-sponsored by Trend Micro, Inc.
============================================================================
TREND MICRO SCANMAIL FOR EXCHANGE 2000 -- SECOND to NONE

If you are worried about email viruses, you need Trend Micro ScanMail for
Exchange. ScanMail is the first antivirus solution that seamlessly
integrates with the Microsoft Exchange 2000 virus-scanning API 2.0. ScanMail
ensures 100% inbound and outbound email virus scanning and provides remote
software management. Download a FREE 30-day trial copy of ScanMail and find
out why it is the best:
http://www.antivirus.com/banners/tracking.asp?si=8&BI;=240&UL;=/smex2000
============================================================================



Relevant Pages

  • RE: exchange event logs
    ... Exchange 2000 Server Eseutil Command Line Switches ... Check the consistency of the information store databases to ... all the log files have been committed to the information store. ... Programs, point to Microsoft Exchange, and then click System Manager. ...
    (microsoft.public.windows.server.sbs)
  • Exchange 2003 SP1 laesst sich nicht auf Frontend Server installier
    ... als ich neulich bei einem Kunden versucht habe, das Exchange 2003 Service ... Pack 1 auf einem deutschen Exchange 2003 Frontend Server zu installieren, ... "Vor dem Installieren von Microsoft Exchange Server Service Pack muss ...
    (microsoft.public.de.exchange)
  • Re: MTA and IS services will not start till the following day
    ... Directory service is ready....set the exchange services to manual, ... The Microsoft Exchange MTA Stacks service entered the stopped state. ... "The MTA database recovery operation is now checking queue: ... Performance counters for the WmiApRpl service were removed ...
    (microsoft.public.exchange.connectivity)
  • Exchange Service Pack 1 Install fails
    ... I have a Small Business Server 2003 set up. ... Exchange SP1 resolves. ... before installing this Microsoft Exchange Server Service Pack. ...
    (microsoft.public.exchange.setup)
  • Potential Problem with Microsoft Security Bulletin MS01-057
    ... Potential issue with this security patch. ... Issue is with an older version of IE on the exchange server. ... Earn 5% rebate on licenses purchased for Trend Micro ScanMail for ... Microsoft Exchange 2000 between October 1 and November 16. ...
    (NT-Bugtraq)