CVE-2006-1193 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-1193
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-1193

Description: Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/25550 ST 1016280 SAID Secunia Advisory: SA20634 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1070 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1161 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1315 OSVDB 26441 MS http://www.microsoft.com/technet/security/bulletin/ms06-029.mspx MISC http://www.sec-consult.com/fileadmin/Advisories/20060613-0_owa_xss_noexploit.txt FULLDISC http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046892.html CERT-VN 138188 CERT http://www.us-cert.gov/cas/techalerts/TA06-164A.html BID 18381

Return to the previous page.