PT-2004-1368 · Microsoft · Exchange Server

Amit Klein · Publicado 2004-08-12 · Atualizado 2020-04-09 · CVE-2004-0203

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Exchange Server 5.5 Service Pack 4

Description A cross-site scripting issue allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.

Recommendations For Exchange Server 5.5 Service Pack 4, consider disabling HTML email rendering or restricting access to HTML redirect queries as a temporary workaround until a patch is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2004-0203

Produtos afetados

Exchange Server

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/16583 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0203 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2016 · Nota
• http://kb.cert.org/vuls/id/948750 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-026 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0203 · Nota de Segurança