Description
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://securitytracker.com/id?1016280 ↗
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046892.html ↗
- http://www.osvdb.org/26441 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25550 ↗
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html ↗
- http://www.securityfocus.com/bid/18381 ↗
- http://www.vupen.com/english/advisories/2006/2326 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1161 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1070 ↗
- http://www.sec-consult.com/fileadmin/Advisories/20060613-0_owa_xss_noexploit.txt ↗
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-029 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1315 ↗
- http://www.kb.cert.org/vuls/id/138188 ↗
- http://secunia.com/advisories/20634 ↗