PT-2001-1908 · Microsoft · Internet Explorer+2

Publicado 2001-12-06 · Atualizado 2020-04-09 · CVE-2001-0726

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange 5.5 Server

Description: The issue concerns the improper detection of certain inline scripts by Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server when used with Internet Explorer. This can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.

Recommendations: For Microsoft Exchange 5.5 Server, consider disabling the use of inline scripts in HTML e-mail messages as a temporary workaround until a patch is available. Restrict access to sensitive mailbox operations to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-0726

Produtos afetados

Internet Explorer

Exchange 5.5 Server

Outlook Web Access

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2001-0726 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7663 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0726 · Nota
• http://osvdb.org/5557 · Nota
• http://securityfocus.com/bid/3650 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057 · Aviso do Fabricante