CVE-2005-0420
Microsoft Exchange Server - Open Redirect via OWA Login Page
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-0420. PoCs published by Morning Wood.
AI-analyzed exploit summary This exploit demonstrates a URI-redirection vulnerability in Microsoft Outlook Web Access (OWA) by crafting malicious URLs that redirect users to arbitrary domains upon login form submission. The issue stems from insufficient sanitization of the 'url' parameter in the 'owalogon.asp' script.
Description
Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.
Exploits (1)
This exploit demonstrates a URI-redirection vulnerability in Microsoft Outlook Web Access (OWA) by crafting malicious URLs that redirect users to arbitrary domains upon login form submission. The issue stems from insufficient sanitization of the 'url' parameter in the 'owalogon.asp' script.