CVE-2006-1193

Vulnerability

A cross-site scripting (XSS) vulnerability exists in Microsoft Exchange Server 2000 Service Pack 1 through Service Pack 3 when running Outlook Web Access (OWA). The flaw is due to improper HTML parsing of email messages, allowing an attacker to inject arbitrary HTML or web script. Affected software includes Exchange 2000 Server Pack 3 with the August 2004 Post-Service Pack 3 Update Rollup, as well as Exchange Server 2003 Service Pack 1 and Service Pack 2 [1][2][3].

Exploitation

An attacker can exploit this vulnerability by sending a specially crafted email containing malicious script to a user of the affected Exchange server. The user must then open the email using OWA. No authentication is required for the attacker to send the email, but user interaction is necessary to trigger the script execution [1][3].

Impact

Successful exploitation allows the attacker to execute arbitrary script in the security context of the victim user on the client system. This can lead to information disclosure, session hijacking, or other actions that the victim user could perform within OWA. Microsoft rates the severity as Important [1][2][3].

Mitigation

Microsoft released security update MS06-029 (KB912442) on June 13, 2006, which addresses this vulnerability for all affected versions. Workarounds are also documented in the bulletin, including disabling OWA or applying URLScan. No evidence of inclusion in the CISA Known Exploited Vulnerabilities (KEV) catalog exists [1][3].