Test ID:	1.3.6.1.4.1.25623.1.0.903418
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Exchange Server Remote Code Execution Vulnerabilities (2915705)
Summary:	This host is missing a critical security update according to Microsoft;Bulletin MS13-105.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS13-105. Vulnerability Insight: Multiple flaws are due to: - An unspecified error in the Outlook Web Access (OWA) service account. - Certain unspecified input is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation will allow an attacker to run arbitrary code and execute arbitrary HTML and script code in a user's browser session in context of an affected site. Affected Software/OS: - Microsoft Exchange Server 2013 - Microsoft Exchange Server 2007 Service Pack 3 - Microsoft Exchange Server 2010 Service Pack 2 - Microsoft Exchange Server 2010 Service Pack 3 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1330 Cert/CC Advisory: TA13-253A http://www.us-cert.gov/ncas/alerts/TA13-253A Microsoft Security Bulletin: MS13-067 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 Microsoft Security Bulletin: MS13-105 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-105 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19040 Common Vulnerability Exposure (CVE) ID: CVE-2013-5072 BugTraq ID: 64085 http://www.securityfocus.com/bid/64085 Common Vulnerability Exposure (CVE) ID: CVE-2013-5763 BugTraq ID: 63741 http://www.securityfocus.com/bid/63741 http://www.securitytracker.com/id/1029190 http://secunia.com/advisories/56237 http://secunia.com/advisories/56241 http://secunia.com/advisories/56243 Common Vulnerability Exposure (CVE) ID: CVE-2013-5791 BugTraq ID: 63076 http://www.securityfocus.com/bid/63076 CERT/CC vulnerability note: VU#953241 http://www.kb.cert.org/vuls/id/953241 http://www.exploit-db.com/exploits/31222 http://www.citadelo.com/en/ms13-105-oracle-outside-in-mdb-parsing-vulnerability-cve-2013-5791/
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.