Bardissi Enterprises Blog

Severity: Medium

8 July, 2008

Summary:

§ This vulnerability affects: Exchange Servers running Outlook Web Access (OWA)

§ How an attacker exploits it: By enticing one of your users into opening a specially crafted email within an OWA session

§ Impact: The attacker gains access to the victim’s OWA email account

§ What to do: Deploy the appropriate Exchange Server patch as soon as possible