06.13.2006 - MS06-029: Vulnerability in Microsoft Exchange Server Running Outlook Web Access Could Allow Script Injection (912442)

Microsoft Exchange Server when running Outlook Web Access Vulnerability - CVE-2006-1193: Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-complicit remote attackers to execute arbitrary script via unknown vectors related to "HTML parsing." - Download Microsoft Exchange 2000 Server SP3 w/August 2004 Post-SP3 Update Rollup - Download Microsoft Exchange Server 2003 SP1 - Download Microsoft Exchange Server 2003 SP2 - View Microsoft Security Bulletin MS05-029 - View Microsoft Knowledge Base Article - 912442 - Visit Microsoft Corporation