SB2023080867 - Multiple vulnerabilities in Microsoft Exchange Server



SB2023080867 - Multiple vulnerabilities in Microsoft Exchange Server

Published: August 8, 2023 Updated: December 8, 2023

Security Bulletin ID SB2023080867
Severity
High
Patch available
YES
Number of vulnerabilities 5
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 20% Medium 80%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 5 secuirty vulnerabilities.


1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2023-21709)

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in Microsoft Exchange Server. A remote attacker can perform a brute-force attack, which leads to security restrictions bypass and privilege escalation.


2) Input validation error (CVE-ID: CVE-2023-35388)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Microsoft Exchange Server. A remote user can pass specially crafted input to the application and execute arbitrary code on the system.


3) Input validation error (CVE-ID: CVE-2023-38182)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Microsoft Exchange Server. A remote user on the local network can pass specially crafted input to the application and execute arbitrary code on the system.


4) Spoofing attack (CVE-ID: CVE-2023-38181)

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to incorrect processing of user-supplied data in Microsoft Exchange Server. A remote user can spoof page content.


5) Input validation error (CVE-ID: CVE-2023-38185)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Microsoft Exchange Server. A remote user can pass specially crafted input to the application and execute arbitrary code on the system.


Remediation

Install update from vendor's website.