Total vulnerabilities in the database
An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.
| Software | From | Fixed in |
|---|---|---|
| microsoft / exchange_server | 2000-sp1 | 2000-sp1.x |
| microsoft / exchange_server | 2000-sp2 | 2000-sp2.x |
| microsoft / exchange_server | 5.5-sp1 | 5.5-sp1.x |
| microsoft / exchange_server | 5.5-sp4 | 5.5-sp4.x |
| microsoft / exchange_server | 5.5-sp2 | 5.5-sp2.x |
| microsoft / exchange_server | 5.5-sp3 | 5.5-sp3.x |
| microsoft / exchange_server | 5.5 | 5.5.x |
| microsoft / exchange_server | 2000 | 2000.x |
| rsa / securid | 5.0 | 5.0.x |