Sponsored Content
Special Forums Cybersecurity Security Advisories (RSS) S-339: Vulnerabilities in Outlook Web Access for Exchange Server Post 302215926 by Linux Bot on Thursday 17th of July 2008 01:40:11 PM
Old 07-17-2008
S-339: Vulnerabilities in Outlook Web Access for Exchange Server

There is a cross-site scripting vulnerability in the affected versions of Outlook Web Access (OWA) for Exchange Server. Exploitation of the vulnerability could lead to elevation of privilege on individual OWA clients connecting to Outlook Web Access for Exchange Server. The risk is LOW. To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted e-mail that would run malicious script from within an individual OWA client. If the malicious script is executed, the script would run inthe security context of the user's OWA session and could perform any action that user could perform such as reading, sending, and deleting e-mail as the logged-on user.


More...
 

8 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Ways to Access Files on Unix Server via Web

Hi all! I'm a web developer with a question. We have a contractor that is working on a project that requires the user to access a ton of files on the clients Unix server. He has plans to built a VB interface for on site windows users to access those files and wants us to develop a web based... (4 Replies)
Discussion started by: Imhotep1963
4 Replies

2. UNIX for Advanced & Expert Users

remote web server access (apache)

Hi, I have web server (apache) installed in server-1 and i want to view the web pages from diferent servers also while the web server is running only in one server ....(all the servers are connected to office LAN) right now all the servers have apache running......and CPU utilzation is at its... (2 Replies)
Discussion started by: aditya.ece1985
2 Replies

3. BSD

forwarding the request to the Outlook Web Access

Hello, FreeBSD is not forwarding the request to the Outlook Web Access. Is there some process that needs to be run in order for this to start? The server was rebuilt and is pingable. Any suggestion is greatly appreciated. Thank you, Gish (1 Reply)
Discussion started by: TESTQWER
1 Replies

4. Web Development

Cannot access Apache web server from Wan side, only Lan side.

I have installed WAMPSERVER 2.0 on my windows vista x64 system but still am having issues with getting the webserver to be seen outside my local network. It is working fine within my local network. Been through several setup tutorials so far, no dice still. For testing purposes I have... (1 Reply)
Discussion started by: davidmanvell
1 Replies

5. Homework & Coursework Questions

Parse a Web Server Access Log

1. The problem statement, all variables and given/known data: Write a parser for a web server access log that will provide the statistics outlined below. Remember to format your output in a neat form. You may complete this assignment with one Awk script or a shell script using a combination of... (6 Replies)
Discussion started by: codyhazelwood
6 Replies

6. AIX

Exchange one server to another

Hi people, In my work i have 2 P595 server (P595A and P595B) i need to exchange one server from P595A to P595B and one from P595B to P595A, i know the best way to do this is make a mksysb copy of the system and restore it on another but, in this process i dont need to exchange all the server,... (4 Replies)
Discussion started by: anonymouzz
4 Replies

7. Shell Programming and Scripting

Send email from sendmail on AIX using exchange server as SMTP server

i am new in AIX i am trying to write a script to take a backup for specific files on server to and check error log if backup success send email to administrator , script done except for sending mail , i try to configure sendmail on aix to use our exchange server to send emails but still get error... (0 Replies)
Discussion started by: ahmed_salah
0 Replies

8. Proxy Server

How to use Squid on Linux to control certain IP to access Web Server and certain IP cannot access?

Dear all experts here, :) I would like to install a proxy server on Linux server to perform solely to control the access of Web server. In this case, some of my vendor asked me to try Squid and I have installed it onto my Linux server. I would like know how can I set the configuration to... (1 Reply)
Discussion started by: kwliew999
1 Replies
disco(1)						      General Commands Manual							  disco(1)

NAME
disco - Mono's Web Service Discovery Tool SYNOPSIS
disco [options] url DESCRIPTION
disco is a tool for discovering web services and for retireving the documents that describe those services. url is the location of a DISCO document, which includes a list of WSDL documents, XML schemas and references to other DISCO documents. disco downloads the DISCO document and all referenced documents (unless the -nosave option is specified), and saves them to disk. OPTIONS
The following options are available: -nologo Supress the startup logo. -nosave Do not save the discovered documents to disk. The default is to save the documents. -o:directory , -out:directory The directory where to save the discovered documents. By default, documents are saved in the current directory. -u:username , -user:username The user name to use when connecting to the server. -p:password , -password:password The password to use when connecting to the server. -d:domain , -domain:domain The domain to use when connecting to the server. -proxy:url The url of the proxy server to use for http requests. -proxyusername:username The user name to use when connecting to the proxy. -proxypassword:password The password to use when connecting to the proxy. -proxydomain:domain The domain to use when connecting to the proxy. AUTHORS
Lluis Sanchez Gual (lluis@ximian.com) LICENSE
disco is released under the terms of the GNU GPL. SEE ALSO
wsdl(1), soapsuds(1), mono(1), mcs(1) disco(1)
All times are GMT -4. The time now is 04:07 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy