Full Disclosure mailing list archives
RE: Microsoft Outlook Web Access
From: "Vernocchi, Pablo" <pablo () vernocchi com ar>
Date: Thu, 13 Oct 2005 13:36:25 -0300
Hi Petko, BIF:9409 has a solution: http://www.securityfocus.com/bid/9409/solution Anyway, I recommend you to use MBSA (Microsoft Baseline Security Analyzer) once a week, to check issues; or Retina as well. Also, there's a tool called Microsoft Exchange Best Practices Analyzer tool that may help you troubleshooting non standard configs or non recommended configs. http://www.microsoft.com/exchange/downloads/2003/exbpa/default.mspx Regards, PV -----Mensaje original----- De: full-disclosure-bounces () lists grok org uk [mailto:full-disclosure-bounces () lists grok org uk] En nombre de Petko Petkov Enviado el: Jueves, 13 de Octubre de 2005 06:22 a.m. Para: full-disclosure () lists grok org uk Asunto: [Full-disclosure] Microsoft Outlook Web Access -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello there, I've been messing around with Microsoft Outlook Web Access (SP1) trying to test and see what I can do. I found several vulnerabilities on google/securityfocus related to this particular version but non of them seem to work. I went to Microsoft website and I can't see any patches available. Well, there is one fix that I really don't know what is for. Does any one know if BID:12459 and BID:9409 had been fixed? If not, is there a way to prevent those attacks from happening? Thanks -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (MingW32) iD8DBQFDTic+Ff/6vxAyUpgRAgWgAJ9d+hpQ650dOfoZiQljAFtfeZJJ5QCgv6bO mCC1wAHPw4vcA1bKPe45KJY= =+TZH -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Microsoft Outlook Web Access Petko Petkov (Oct 13)
- RE: Microsoft Outlook Web Access Vernocchi, Pablo (Oct 13)