virus logo Intrusion Prevention

MS.Exchange.Server.Outlook.Web.Access.Script.Injection

description-logoDescription

This indicates an attack attempt against a Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server when running Outlook Web Access (OWA), which allows remote attackers to inject arbitrary HTML or web script.

affected-products-logoAffected Products

Microsoft Exchange 2000 Server Pack 3 with the August 2004
Exchange 2000 Server Post-Service Pack 3 Update Rollup
Microsoft Exchange Server 2003 Service Pack 1
Microsoft Exchange Server 2003 Service Pack 2

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply patch, available from the web site:
http://www.microsoft.com/technet/security/bulletin/MS06-029.mspx

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 13281
Created Oct 17, 2006
Updated Nov 15, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2006-1193
Exploit Prediction Score 96.63%
Default Action drop
Active
Affected OS Windows
Affected App MS_Exchange