CVE-2003-0904

Опубликовано: 20 янв. 2004

Источник: nvd

CVSS2: 6

EPSS Средний

Описание

Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.

Ссылки

http://secunia.com/advisories/10615
Third Party Advisory
http://www.kb.cert.org/vuls/id/530660
Third Party Advisory
US Government Resource
http://www.microsoft.com/exchange/support/e2k3owa.asp
Patch
Vendor Advisory
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0311&L=ntbugtraq&F=P&S=&P=9281
Third Party Advisory
http://www.securityfocus.com/bid/9118
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/9409
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-002
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13869
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A477
Third Party Advisory
http://secunia.com/advisories/10615
Third Party Advisory
http://www.kb.cert.org/vuls/id/530660
Third Party Advisory
US Government Resource
http://www.microsoft.com/exchange/support/e2k3owa.asp
Patch
Vendor Advisory
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0311&L=ntbugtraq&F=P&S=&P=9281
Third Party Advisory
http://www.securityfocus.com/bid/9118
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/9409
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-002
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13869
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A477
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_services:2.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:enterprise:*:x64:*

cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:datacenter:*:x64:*

cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:standard:*:x64:*

cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:web:*:*:*

cpe:2.3:o:microsoft:windows_server_2003:r2:*:*:*:*:*:x64:*

EPSS

Процентиль: 94%

0.14163

Средний

6 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-wpp8-hx5r-4jfx

github

почти 4 года назад