The Active Network
ActiveMac Anonymous | Create a User | Reviews | News | Forums | Advertise  
 

  *  

  Microsoft Security Bulletin MS01-047: OWA Function Allows Unauthenticated User to Enumerate Global Address List
Time: 19:42 EST/00:42 GMT | News Source: ActiveWin.com | Posted By: Matthew Sabean

Among the functions Outlook Web Access (OWA) in Exchange 5.5 offers is the ability to search the global address list (GAL). By design, this is an authenticated function, implemented as a two-tier architecture - a front tier that provides a user interface and a back-end tier that actually performs the search. However, only the front tier actually checks authentication. An attacker who sent a properly formatted request to the back-end function that actually performs the search could enumerate the GAL without authenticating.

  • The vulnerability would only allow the attacker to learn users’ email aliases. It would not provide any other capabilities. Specifically, it would not give the attacker any way to create or send mail as a user; to read, change or delete mail; or to perform any other functions on the server.
  • The vulnerability is only exploitable via OWA. Exchange servers that are not configured to offer OWA are not affected by the vulnerability.
  • The vulnerability does not affect Exchange 2000, even when offering OWA.

Patch availability:
Microsoft Exchange 5.5: http://www.microsoft.com/Downloads/Release.asp?ReleaseID=32483

Write Comment
Return to News

  Displaying 776 through 787 of 787
Prev | First
  The time now is 10:16:36 AM ET.
Any comment problems? E-mail us
#776 By 4240821 (82.115.4.100) at 1/2/2026 12:16:30 AM
https://www.pillowfort.social/posts/6526455
https://www.pillowfort.social/posts/6526341
https://www.pillowfort.social/posts/6526219
https://www.pillowfort.social/posts/6526051
https://www.pillowfort.social/posts/6525874
https://www.pillowfort.social/posts/6525694
https://www.pillowfort.social/posts/6525474
https://www.pillowfort.social/posts/6525356
https://www.pillowfort.social/posts/6525166
https://www.pillowfort.social/posts/6525101

#777 By 4240821 (82.115.4.100) at 1/4/2026 1:01:03 PM
https://www.pillowfort.social/posts/7048228
https://www.pillowfort.social/posts/7048088
https://www.pillowfort.social/posts/7048043
https://www.pillowfort.social/posts/7048005
https://www.pillowfort.social/posts/7047992
https://www.pillowfort.social/posts/7047971
https://www.pillowfort.social/posts/7047947
https://www.pillowfort.social/posts/7047845
https://www.pillowfort.social/posts/6997267
https://www.pillowfort.social/posts/6997121

#778 By 4240821 (82.115.4.100) at 1/4/2026 5:28:56 PM
https://www.pillowfort.social/posts/7052438
https://www.pillowfort.social/posts/7052362
https://www.pillowfort.social/posts/7052261
https://www.pillowfort.social/posts/7052158
https://www.pillowfort.social/posts/7052054
https://www.pillowfort.social/posts/7051958
https://www.pillowfort.social/posts/7051916
https://www.pillowfort.social/posts/7051861
https://www.pillowfort.social/posts/7051817
https://www.pillowfort.social/posts/7051704

#779 By 4240821 (82.115.4.100) at 1/4/2026 6:00:00 PM
https://www.pillowfort.social/posts/6856484
https://www.pillowfort.social/posts/6856449
https://www.pillowfort.social/posts/6856425
https://www.pillowfort.social/posts/6856394
https://www.pillowfort.social/posts/6856381
https://www.pillowfort.social/posts/6856334
https://www.pillowfort.social/posts/6856331
https://www.pillowfort.social/posts/6856325
https://www.pillowfort.social/posts/6855175
https://www.pillowfort.social/posts/6855121

#780 By 4240821 (82.115.4.100) at 1/5/2026 12:04:33 AM
https://www.pillowfort.social/posts/6563715
https://www.pillowfort.social/posts/6563541
https://www.pillowfort.social/posts/6563411
https://www.pillowfort.social/posts/6563289
https://www.pillowfort.social/posts/6563122
https://www.pillowfort.social/posts/6563006
https://www.pillowfort.social/posts/6562827
https://www.pillowfort.social/posts/6562722
https://www.pillowfort.social/posts/6562565
https://www.pillowfort.social/posts/6562430

#781 By 4240821 (82.115.4.100) at 1/5/2026 3:22:24 PM
https://www.pillowfort.social/posts/6908308
https://www.pillowfort.social/posts/6908203
https://www.pillowfort.social/posts/6908142
https://www.pillowfort.social/posts/6908096
https://www.pillowfort.social/posts/6908063
https://www.pillowfort.social/posts/6908038
https://www.pillowfort.social/posts/6907985
https://www.pillowfort.social/posts/6907911
https://www.pillowfort.social/posts/6907873
https://www.pillowfort.social/posts/6907839

#782 By 4240821 (82.115.4.100) at 1/6/2026 2:43:16 AM
https://www.pillowfort.social/posts/6725501
https://www.pillowfort.social/posts/6725276
https://www.pillowfort.social/posts/6725091
https://www.pillowfort.social/posts/6724886
https://www.pillowfort.social/posts/6724794
https://www.pillowfort.social/posts/6724702
https://www.pillowfort.social/posts/6724647
https://www.pillowfort.social/posts/6724537
https://www.pillowfort.social/posts/6724317
https://www.pillowfort.social/posts/6723698

#783 By 4240821 (82.115.4.100) at 1/7/2026 11:41:50 AM
https://www.pillowfort.social/posts/6676620
https://www.pillowfort.social/posts/6676402
https://www.pillowfort.social/posts/6676237
https://www.pillowfort.social/posts/6676084
https://www.pillowfort.social/posts/6675918
https://www.pillowfort.social/posts/6675784
https://www.pillowfort.social/posts/6675672
https://www.pillowfort.social/posts/6675584
https://www.pillowfort.social/posts/6675464
https://www.pillowfort.social/posts/6675343

#784 By 4240821 (82.115.4.100) at 1/7/2026 12:37:47 PM
https://www.pillowfort.social/posts/7072673
https://www.pillowfort.social/posts/7072516
https://www.pillowfort.social/posts/7072221
https://www.pillowfort.social/posts/7071917
https://www.pillowfort.social/posts/7071674
https://www.pillowfort.social/posts/7071573
https://www.pillowfort.social/posts/7071447
https://www.pillowfort.social/posts/7071336
https://www.pillowfort.social/posts/7071232
https://www.pillowfort.social/posts/7071170

#785 By 4240821 (82.115.4.100) at 1/9/2026 5:23:08 PM
https://www.pillowfort.social/posts/6952942
https://www.pillowfort.social/posts/6952897
https://www.pillowfort.social/posts/6952859
https://www.pillowfort.social/posts/6952754
https://www.pillowfort.social/posts/6952677
https://www.pillowfort.social/posts/6952565
https://www.pillowfort.social/posts/6952506
https://www.pillowfort.social/posts/6952414
https://www.pillowfort.social/posts/6952328
https://www.pillowfort.social/posts/6952260

#786 By 4240821 (82.115.4.100) at 1/10/2026 1:47:15 AM
https://www.pillowfort.social/posts/6885340
https://www.pillowfort.social/posts/6885256
https://www.pillowfort.social/posts/6885204
https://www.pillowfort.social/posts/6885136
https://www.pillowfort.social/posts/6884954
https://www.pillowfort.social/posts/6884883
https://www.pillowfort.social/posts/6884820
https://www.pillowfort.social/posts/6884789
https://www.pillowfort.social/posts/6884724
https://www.pillowfort.social/posts/6884652

#787 By 4240821 (82.115.4.100) at 1/10/2026 4:36:58 AM
https://www.pillowfort.social/posts/6611356
https://www.pillowfort.social/posts/6611195
https://www.pillowfort.social/posts/6611031
https://www.pillowfort.social/posts/6610940
https://www.pillowfort.social/posts/6610722
https://www.pillowfort.social/posts/6610470
https://www.pillowfort.social/posts/6610368
https://www.pillowfort.social/posts/6610035
https://www.pillowfort.social/posts/6609883
https://www.pillowfort.social/posts/6609075

Write Comment
Return to News
  Displaying 776 through 787 of 787
Prev | First
  The time now is 10:16:36 AM ET.
Any comment problems? E-mail us
User name and password:

 

  *  
  *   *