NetSight
low2.1

CVE-2002-0507

An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via seve…

Impact

An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.

Affected products

VendorProductAffected versions
MicrosoftExchange Server
Versions 5.5, 2000
RsaSecurid
Version 5.0

Weakness classification

References