FW: RPC / Outlook over HTTP(S)

From: Keith Bucknall (keith.bucknall_at_promo-it.co.uk)
Date: 11/10/05

  • Next message: Devdas Bhagat: "Re: [LIST][SECURITYBASICS] Sender Spoofing via SMTP" 
    Date: Thu, 10 Nov 2005 19:56:09 -0000
To: <security-basics@securityfocus.com>

    Dear All,
     
    I am wondering if anyone could provide further information on security
    vulnerabilities over using RPC over HTTP or HTTPS. Our company is looking
    at rolling out Exchange 2003 with RPC over HTTP and I was under the
    impression that this process was unsecured.
     
    Any information would be grateful
     
    Regards
     
    Keith

  • Next message: Devdas Bhagat: "Re: [LIST][SECURITYBASICS] Sender Spoofing via SMTP"

    Relevant Pages

    • Re: Errors 5790 and 5719; Domain Not Found
      ... I have configured rpc over http following those docs:) ... As my DC/GC is not on the same machine as Exchange Server, ... >> Exchange Server to configure RPC over HTTP connections for Outlook... ...
      (microsoft.public.windows.server.active_directory)
    • RE: RPC over HTTP problem
      ... I understand that the RPC over HTTP do not ... RPC over HTTP on Exchange 2003: ... Microsoft Exchange Server 2003 RPC over HTTP Deployment Scenarios ...
      (microsoft.public.exchange.admin)
    • Re: Outlook 2003 Client messages stay in Outbox
      ... > I am running Exchange 2003 with Win2K and XP clients running Outlook ... I recently setup rpc over http and have ... > A couple of days ago I configured an Exchange mailbox on an XP laptop ...
      (microsoft.public.exchange.clients)
    • Re: Outlook over http
      ... Windows 2003 - Exchange 2003. ... Now we want to use the RPC over HTTP so I made sure we were on ... I set my FE server to be FE for RPC over HTTP. ...
      (microsoft.public.outlook.general)
    • RE: RPC over HTTP
      ... NTLM and Basic Authentication for RPC over HTTP: ... TCP port to connect Exchange server by Outlook, it is easy to go through ...
      (microsoft.public.windows.server.sbs)