Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.
References
| Link | Resource |
|---|---|
| http://www.osvdb.org/5557 | Broken Link |
| http://www.securityfocus.com/bid/3650 | Third Party Advisory VDB Entry |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057 | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/7663 | Third Party Advisory VDB Entry |
| http://www.osvdb.org/5557 | Broken Link |
| http://www.securityfocus.com/bid/3650 | Third Party Advisory VDB Entry |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057 | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/7663 | Third Party Advisory VDB Entry |
Configurations
History
20 Nov 2024, 23:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.osvdb.org/5557 - Broken Link | |
| References | () http://www.securityfocus.com/bid/3650 - Third Party Advisory, VDB Entry | |
| References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057 - Patch, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/7663 - Third Party Advisory, VDB Entry |
Information
Published : 2001-12-06 05:00
Updated : 2024-11-20 23:36
NVD link : CVE-2001-0726
Mitre link : CVE-2001-0726
CVE.ORG link : CVE-2001-0726
JSON object : View
Products Affected
microsoft
- exchange_server
CWE