5 - MS14-075

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	Vulnerabilities in Microsoft Exchange Server Could Allow Elevation of Privilege (3009712)

Informations
Name	MS14-075	First vendor Publication	2014-12-09
Vendor	Microsoft	Last vendor Modification	2014-12-12
Severity (Vendor)	Important	Revision	3.0

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Severity Rating: Important
Revision Note: V3.0 (December 12, 2014): Rereleased bulletin to announce the reoffering of Microsoft security update 2986475 for Microsoft Exchange Server 2010 Service Pack 3. The rereleased update addresses a known issue in the original offering. Customers who uninstalled the original update should install the updated version of 2986475 at the earliest opportunity.
Summary: This security update resolves four privately reported vulnerabilities in Microsoft Exchange Server. The most severe of these vulnerabilities could allow elevation of privilege if a user clicks a specially crafted URL that takes them to a targeted Outlook Web App site. An attacker would have no way to force users to visit a specially crafted website. Instead, an attacker would have to convince them to visit the website, typically by getting them to click a link in an email message or Instant Messenger message that takes them to the attacker's website, and then convince them to click the specially crafted URL.

Original Source

Url : https://technet.microsoft.com/en-us/library/security/MS14-075

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)
25 %	CWE-284	Access Control (Authorization) Issues
25 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:28291

Oval ID:	oval:org.mitre.oval:def:28291
Title:	OWA XSS vulnerability (CVE-2014-6325) - MS14-075
Description:	Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6326.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-6325	Version:	3
Platform(s):	Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Exchange Server 2013
Definition Synopsis:
Exchange Server 2013 and vulnerable file version Microsoft Exchange Server 2013 is installed AND Check if the version of ExSetup.exe is less than 15.00.0847.035 OR Exchange 2013 CU 6 and vulnerable file version Check if the version of ExSetup.exe is less than 15.00.0995.034 AND Microsoft Exchange Server 2013 CU 6 is installed

Definition Id: oval:org.mitre.oval:def:28328

Oval ID:	oval:org.mitre.oval:def:28328
Title:	OWA XSS vulnerability (CVE-2014-6326) - MS14-075
Description:	Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6325.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-6326	Version:	3
Platform(s):	Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Exchange Server 2013
Definition Synopsis:
Exchange Server 2013 and vulnerable file version Microsoft Exchange Server 2013 is installed AND Check if the version of ExSetup.exe is less than 15.00.0847.035 OR Exchange 2013 CU 6 and vulnerable file version Check if the version of ExSetup.exe is less than 15.00.0995.034 AND Microsoft Exchange Server 2013 CU 6 is installed

Definition Id: oval:org.mitre.oval:def:28415

Oval ID:	oval:org.mitre.oval:def:28415
Title:	Exchange URL redirection vulnerability (CVE-2014-6336) - MS14-075
Description:	Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which allows remote attackers to redirect users to arbitrary web sites and spoof the origin of e-mail messages via unspecified vectors, aka "Exchange URL Redirection Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-6336	Version:	3
Platform(s):	Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Exchange Server 2013
Definition Synopsis:
Exchange Server 2013 and vulnerable file version Microsoft Exchange Server 2013 is installed AND Check if the version of ExSetup.exe is less than 15.00.0847.035 OR Exchange 2013 CU 6 and vulnerable file version Check if the version of ExSetup.exe is less than 15.00.0995.034 AND Microsoft Exchange Server 2013 CU 6 is installed

Definition Id: oval:org.mitre.oval:def:28425

Oval ID:	oval:org.mitre.oval:def:28425
Title:	Outlook Web App token spoofing vulnerability (CVE-2014-6319) - MS14-075
Description:	Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows remote attackers to spoof the origin of e-mail messages via unspecified vectors, aka "Outlook Web App Token Spoofing Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-6319	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Exchange Server 2007 Microsoft Exchange Server 2010 Microsoft Exchange Server 2013
Definition Synopsis:
Exchange Server 2007 and vulnerable file version Microsoft Exchange Server 2007 (no Service Pack) is installed AND Check if the version of exsetup.exe is less than 8.03.0389.002 OR Exchange Server 2010 and vulnerable file version Microsoft Exchange Server 2010 is installed AND Check if the version of ExSetup.exe is less than 14.03.0224.001 OR Exchange Server 2013 and vulnerable file version Microsoft Exchange Server 2013 is installed AND Check if the version of ExSetup.exe is less than 15.00.0847.035 OR Exchange 2013 CU 6 and vulnerable file version Check if the version of ExSetup.exe is less than 15.00.0995.034 AND Microsoft Exchange Server 2013 CU 6 is installed

CPE : Common Platform Enumeration

Type	Description	Count
Application	Microsoft Exchange Server cpe:2.3:a:microsoft:exchange_server:2013:sp1:::::: cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_6:::::: cpe:2.3:a:microsoft:exchange_server:2010:sp3:::::: cpe:2.3:a:microsoft:exchange_server:2007:sp3::::::	4

Information Assurance Vulnerability Management (IAVM)

Date	Description
2014-12-11	IAVM : 2014-A-0186 - Multiple Vulnerabilities in Microsoft Exchange Server (MS14-075) Severity : Category II - VMSKEY : V0057713

Snort® IPS/IDS

Date	Description
2015-01-08	Microsoft Exchange OWA meeting invite XSS attempt RuleID : 32705 - Revision : 2 - Type : SERVER-MAIL
2015-01-08	Microsoft Outlook Web Access parameter cross site scripting attempt RuleID : 32682 - Revision : 3 - Type : SERVER-WEBAPP
2015-01-08	Microsoft Outlook Web Access parameter cross site scripting attempt RuleID : 32681 - Revision : 3 - Type : SERVER-WEBAPP

Nessus® Vulnerability Scanner

Date	Description
2014-12-09	Name : The remote mail server is affected by multiple vulnerabilities. File : smb_nt_ms14-075.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2018-10-13 05:21:19	Multiple Updates
2015-10-18 17:26:24	Multiple Updates
2015-01-08 21:27:45	Multiple Updates
2014-12-12 21:26:59	Multiple Updates
2014-12-12 21:16:18	Multiple Updates
2014-12-11 21:27:19	Multiple Updates
2014-12-11 05:32:08	Multiple Updates
2014-12-11 00:26:50	Multiple Updates
2014-12-11 00:15:46	Multiple Updates
2014-12-10 13:27:03	Multiple Updates
2014-12-09 21:29:38	Multiple Updates
2014-12-09 21:16:31	First insertion

Global Informations

Type	Count
CWE ID(s)	4
Oval ID(s)	4
CPE ID(s)	4
IAVM(s)	1
Snort® Rule(s)	3
Nessus® Exploit(s)	1

	Related
10	MS16-079
10	MS14-066
10	MS14-057
10	MS14-037
10	MS14-035
10	MS14-026
10	MS14-021
10	MS14-008
10	MS13-105
9.3	MS14-084
9.3	MS14-083
9.3	MS14-082
9.3	MS14-081
9.3	MS14-080
9.3	MS14-078
9.3	MS14-072
9.3	MS14-069
9.3	MS14-067
9.3	MS14-065
9.3	MS14-064
9.3	MS14-061
9.3	MS14-060
9.3	MS14-058
9.3	MS14-056
9.3	MS14-052
9.3	MS14-051
9.3	MS14-050
9.3	MS14-048
9.3	MS14-038
9.3	MS14-036
9.3	MS14-034
9.3	MS14-029
9.3	MS14-023
9.3	MS14-020
9.3	MS14-018
9.3	MS14-017
9.3	MS14-013
9.3	MS14-012
9.3	MS14-011
9.3	MS14-010
9.3	MS14-009
9.3	MS14-007
9.3	MS14-001
9	MS14-068
9	MS14-025
9	MS14-022
7.8	MS14-006
7.6	MS14-039
7.5	MS14-047
7.2	MS14-070
7.2	MS14-063
7.2	MS14-062
7.2	MS14-054
7.2	MS14-049
7.2	MS14-045
7.2	MS14-040
7.2	MS14-027
7.2	MS14-015
7.2	MS14-003
7.2	MS14-002
7.1	MS14-079
7.1	MS14-014
7.1	MS14-005
6.9	MS14-041
6.9	MS14-019
6.8	MS14-044
6.8	MS14-043
6.8	MS14-024
5.4	MS14-016
5.1	MS14-076
5.1	MS14-030
5	MS14-085
5	MS14-077
5	MS14-055
5	MS14-053
5	MS14-031
5	MS14-028
5	CVE-2014-6319
4.3	MS14-074
4.3	MS14-073
4.3	MS14-071
4.3	MS14-059
4.3	MS14-046
4.3	MS14-033
4.3	MS14-032
4.3	CVE-2014-6326
4.3	CVE-2014-6325
4	MS14-042
4	MS14-004
3.5	CVE-2014-6336
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 90 more Alert(s)