CVE Vulnerability

CVE-2008-1547

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://www.securityfocus.com/bid/31765 Exploit Third Party Advisory
http://securityreason.com/securityalert/4441 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46061 VDB Entry
http://www.securityfocus.com/archive/1/497534/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/497500/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/497433/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/497390/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/497374/100/0/threaded Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
Information

Published : 2008-10-21 01:18

Updated : 2020-04-09 01:22

NVD link : CVE-2008-1547

Mitre link : CVE-2008-1547

Products Affected
No products.
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')