Microsoft Outlook Web Access Login Form Remote URI Redirection Vulnerability

A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data.

An attacker may leverage this issue to carry out convincing phishing attacks against unsuspecting users by causing an arbitrary page to be loaded when the Microsoft Outlook Web Access login form is submitted.


Bugtraq ID: 12459
Class: Input Validation Error
CVE: CVE-2005-0420

Remote: Yes
Local: No
Published: Feb 07 2005 12:00AM
Updated: May 31 2019 10:00PM
Credit: "morning_wood" <[email protected]> is credited with the disclosure of this issue.
Vulnerable: Microsoft Exchange Server 2003 SP1
Microsoft Exchange Server 2003

Not Vulnerable: Microsoft Exchange Server 2007 0


No exploit is required. The following proofs of concept have been provided:

Related Posts