A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data.
An attacker may leverage this issue to carry out convincing phishing attacks against unsuspecting users by causing an arbitrary page to be loaded when the Microsoft Outlook Web Access login form is submitted.
Information
Microsoft Exchange Server 2003
Exploit
No exploit is required. The following proofs of concept have been provided:
https://owa.example.com/exchweb/bin/auth/owalogon.asp?url=http://www.example.net
https://owa.example.com/exchweb/bin/auth/owalogon.asp?url=http://3221234342/
References:
- [Full-disclosure] OWA login redirection - Mitigation (Morning Wood)
- Exchange Server Home Page (Microsoft)
- EXPL-A-2005-001 exploitlabs.com Advisory 030 (Donnie Werner)