MS08-039 ? Important: Vulnerabilities in Outlook Web Access for Exchange Server Could Allow Elevation of Privilege (953747) - Version:1.1

Severity Rating: Important - Revision Note: V1.1 (July 9, 2008): Changed the information reference link for OWA Premium in the Mitigating Factors sections for both vulnerabilities.Summary: This security update resolves two privately reported vulnerabilities in Outlook Web Access (OWA) for Microsoft Exchange Server. An attacker who successfully exploited these vulnerabilities could gain access to an individual OWA client?s session data, allowing elevation of privilege. The attacker could then perform any action the user could perform from within the individual client?s OWA session.

Related Items