VULHUB ™

Outlook Web Access is an optional component of Microsoft Exchange Server which runs in conjunction with Microsoft Internet Information Server. It provides access to a user's Exchange mailbox through a web interface. A user can enter a long string of % characters into the Log On field in the Outlook Web Access page. Then, when the user receives the NT challenge dialog, a username and password composed of a long string of % characters is also entered. This will cause the WWW Publishing service and the IIS Administration service to stop. Note: If this behaviour is due to a buffer overrun condition, it may be possible to execute arbitrary code on the server with administrative privileges.

Outlook Web Access is an optional component of Microsoft Exchange Server which runs in conjunction with Microsoft Internet Information Server. It provides access to a user's Exchange mailbox through a web interface. A user can enter a long string of % characters into the Log On field in the Outlook Web Access page. Then, when the user receives the NT challenge dialog, a username and password composed of a long string of % characters is also entered. This will cause the WWW Publishing service and the IIS Administration service to stop. Note: If this behaviour is due to a buffer overrun condition, it may be possible to execute arbitrary code on the server with administrative privileges.