CVE-2005-0420 - Ungrassed Jar

Description

Microsoft Outlook Web Access (OWA) when used with Exchange allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.

Reference

http://secunia.com/advisories/14144 http://www.securityfocus.com/bid/12459 http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html http://www.vupen.com/english/advisories/2005/0105 https://exchange.xforce.ibmcloud.com/vulnerabilities/19225 owa-owalogonasp-url-redirect(19225)