CVE

Id
7728  
CVE No.
CVE-2003-0904  
Status
Candidate  
Description
Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.  
Phase
Assigned (20031104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
45696 7728 CVE-2003-0904 NTBUGTRAQ:20031114 Exchange 2003 OWA major security flaw  View
45697 7728 CVE-2003-0904 URL:http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0311&L=ntbugtraq&F=P&S=&P=9281  View
45698 7728 CVE-2003-0904 MS:MS04-002  View
45699 7728 CVE-2003-0904 URL:http://www.microsoft.com/technet/security/bulletin/ms04-002.asp  View
45700 7728 CVE-2003-0904 CONFIRM:http://www.microsoft.com/exchange/support/e2k3owa.asp  View
45701 7728 CVE-2003-0904 CERT-VN:VU#530660  View
45702 7728 CVE-2003-0904 URL:http://www.kb.cert.org/vuls/id/530660  View
45703 7728 CVE-2003-0904 BID:9118  View
45704 7728 CVE-2003-0904 URL:http://www.securityfocus.com/bid/9118  View
45705 7728 CVE-2003-0904 BID:9409  View
45706 7728 CVE-2003-0904 URL:http://www.securityfocus.com/bid/9409  View
45707 7728 CVE-2003-0904 OVAL:oval:org.mitre.oval:def:477  View
45708 7728 CVE-2003-0904 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:477  View
45709 7728 CVE-2003-0904 SECUNIA:10615  View
45710 7728 CVE-2003-0904 URL:http://secunia.com/advisories/10615  View
45711 7728 CVE-2003-0904 XF:exchange-owa-account-access(13869)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62731 JVNDB-2004-000072 Microsoft Windows の Windows Media Service におけるサービス運用妨害 (DoS) の脆弱性 Microsoft Windows Media Station Service および Windows Media Monitor Service には TCP/IP におけるコネクション処理の不備のため、特定のシーケンス番号を受信した場合、新規リクエストの応答を停止してしまう脆弱性が存在します。 CVE-2003-0905 7728 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000072.html  View