[VulnWatch] 2 Microsoft Exchange Server Bulletins (1 critical, 1 moderate)

From: Chris Wysopal (weld_at_vulnwatch.org)
Date: 10/16/03

Next message: NGSSoftware Insight Security Research: "[VulnWatch] Microsoft PCHealth 2003/XP Buffer Overflow (#NISR15102003)"

Previous message: Chris Wysopal: "[VulnWatch] 5 Windows vulnerabilities for October 2003 (4 critical, 1 important)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Wed, 15 Oct 2003 22:09:21 +0000 (GMT)
To: vulnwatch@vulnwatch.org

*Critical*

Vulnerability in Exchange Server Could Allow Arbitrary Code Execution
(829436)
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-046.asp

*Moderate*

Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow
Cross-Site Scripting Attack (828489)
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-047.asp

Next message: NGSSoftware Insight Security Research: "[VulnWatch] Microsoft PCHealth 2003/XP Buffer Overflow (#NISR15102003)"

Previous message: Chris Wysopal: "[VulnWatch] 5 Windows vulnerabilities for October 2003 (4 critical, 1 important)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

[NT] Microsoft Exchange Server Outlook Web Access Script Injection (MS06-029)
... Get your security news from a reliable source. ... A script injection vulnerability exists in Exchange Server running Outlook ... Vulnerability in Microsoft Exchange Server running Outlook Web Access ...
(Securiteam)
[NT] Microsoft Exchange Code Execution (MS06-019)
... Get your security news from a reliable source. ... Microsoft Exchange Code Execution ... A remote code execution vulnerability exists in Microsoft Exchange Server ...
(Securiteam)
[NT] Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Allow Code Execution
... Get your security news from a reliable source. ... Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange ... Microsoft Exchange Server because of the way that it decodes the Transport ...
(Securiteam)
Alert: Microsoft Security Bulletin MS03-046 - Vulnerability in Exchange Server Could Allow Arbitrary
... * Microsoft Exchange Server 5.5, ... a security vulnerability exists in the Internet ... Mail Service that could allow an unauthenticated attacker to connect to ...
(NT-Bugtraq)
MinorRev: Microsoft Security Bulletin MS03-046 - Vulnerability in Exchange Server Could Allow Arbitr
... Information" "Exchange Server 5.5 Service Pack 4". ... Microsoft Security Bulletin MS03-046: ... Vulnerability in Exchange Server Could Allow Arbitrary Code Execution ...
(NT-Bugtraq)