Detections
Analytics

MS04-002: Exchange Privilege Escalation (832759)

low Nessus Plugin ID 11989

Synopsis

It is possible to access other users mailboxes.

Description

The remote host is running an unpatched version of Microsoft Exchange that could allow an attacker with a valid Exchange account to access another user's mailbox using Outlook for Web Access

Solution

Microsoft has released a set of patches for Exchange 2003.

See Also

https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2004/ms04-002

Plugin Details

Severity: Low

ID: 11989

File Name: smb_nt_ms04-002.nasl

Version: 1.39

Type: local

Agent: windows

Published: 1/13/2004

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.3

CVSS v2

Risk Factor: Low

Base Score: 3.6

Temporal Score: 2.7

Vector: CVSS2#AV:N/AC:H/Au:S/C:P/I:P/A:N

Vulnerability Information

CPE: cpe:/a:microsoft:exchange_server

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 1/13/2004

Vulnerability Publication Date: 11/14/2003

Reference Information

CVE: CVE-2003-0904

BID: 9118, 9409

CWE: 200

MSFT: MS04-002

MSKB: 832759