Alert GCSA-12039 - Vulnerabilita' multiple in Microsoft Exchange

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

      Alert ID : GCSA-12039
          Data : 25 Luglio 2012
        Titolo : Vulnerabilita' multiple in Microsoft Exchange Server

******************************************************************


:: Descrizione del problema

Sono state riportate vulnerabilita' multiple in Microsoft Exchange Server
che potrebbero essere sfruttate per causare attacchi DoS e compromettere un 
sistema che ne sia affetto.

Le vulnerabilita' sono presenti nella versione bundle delle librerie Oracle 
Outside In Technology.


:: Software interessato

Microsoft Exchange Server 2007
Microsoft Exchange Server 2010


:: Impatto

DoS
Accesso al sistema


:: Soluzioni

Microsoft raccomanda di applicare il workaround:
http://technet.microsoft.com/en-us/security/advisory/2737111


:: Riferimenti

Microsoft:
http://technet.microsoft.com/en-us/security/advisory/2737111

Mitre's CVE ID:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1766
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1767
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1768
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1769
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1770
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1771
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1772
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1773
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3106
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3107
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3108
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3110

Secunia:
http://secunia.com/advisories/50019/

-----BEGIN PGP SIGNATURE-----

iD8DBQFQEADVwZxMk2USYEIRAkrIAJ4gLYXclboYrysZG6JnvgIWCnmuNQCgnRAC
2Bm+qkNBWmUgUAyUCPsfZ60=
=+bFC
-----END PGP SIGNATURE-----