----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

Join the FREE BETA test of the Network Software Inspector (NSI)!
http://secunia.com/network_software_inspector/

The NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,000 different Windows applications.

----------------------------------------------------------------------

TITLE:
Microsoft Exchange Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA25183

VERIFY ADVISORY:
http://secunia.com/advisories/25183/

CRITICAL:
Highly critical

IMPACT:
Cross Site Scripting, DoS, System access

WHERE:
>From remote

SOFTWARE:
Microsoft Exchange Server 2000
http://secunia.com/product/41/
Microsoft Exchange Server 2003
http://secunia.com/product/1828/
Microsoft Exchange Server 2007
http://secunia.com/product/13797/
Microsoft Exchange 2000 Enterprise Server
http://secunia.com/product/42/

DESCRIPTION:
Some vulnerabilities have been reported in Microsoft Exchange, which
can be exploited by malicious people to conduct script insertion
attacks, cause a DoS (Denial of Service), or compromise a vulnerable
system.

1) Outlook Web Access (OWA) does not handle a certain UTF character
set label correctly. As a results, script-based attachments are not
properly sanitised before being displaying, which can be exploited to
execute arbitrary HTML and script code in a user's browser session in
context of a vulnerable site when opening a file.

2) An error in the Exchange Collaboration Data Objects (EXCDO)
functionality when handling calender content requests can be
exploited to cause the mail service to stop responding via a
specially crafted iCal file.

3) An error in the MIME decoding can be exploited to execute
arbitrary code via a malicious e-mail message containing specially
crafted base64-encoded content.

4) An error in the handling of invalid IMAP requests can be exploited
to cause the mail service to stop responding via a specially crafted
IMAP command.

SOLUTION:
Apply patches.

Exchange 2000 Server SP3 with Exchange 2000 Post-SP3 Update Rollup of
August 2004:
http://www.microsoft.com/downloads/details.aspx?FamilyId=21968843-4A81-4F1D-8207-5B0A710E3157

Exchange Server 2003 SP1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=5E7939BE-73D1-461C-8C79-EDDB0F1459FC

Exchange Server 2003 SP2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=1ABF93DA-D765-4876-96B5-ACB2D2A48F8F

Exchange Server 2007:
http://www.microsoft.com/downloads/details.aspx?FamilyId=356874EF-C9C0-4842-99F0-E449E9940358

PROVIDED AND/OR DISCOVERED BY:
1) The vendor credits Martijn Brinkers, Izecom.
2) The vendor credits Alexander Sotirov, Determina Security
Research.
3) Reported by the vendor.
4) Discovered by Joxean Koret and reported via iDefense Labs.

ORIGINAL ADVISORY:
MS07-026 (KB931832):
http://www.microsoft.com/technet/security/Bulletin/MS07-026.mspx

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------