PT-2004-1368 · Microsoft · Exchange Server

Amit Klein · Published 2004-08-12 · Updated 2020-04-09 · CVE-2004-0203

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Exchange Server 5.5 Service Pack 4

Description A cross-site scripting issue allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.

Recommendations For Exchange Server 5.5 Service Pack 4, consider disabling HTML email rendering or restricting access to HTML redirect queries as a temporary workaround until a patch is available.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2004-0203

Affected Products

Exchange Server

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0203 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16583 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0203 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2016 · Note
• http://kb.cert.org/vuls/id/948750 · Note