CVE ID:	CVE-2003-0904
Description:	Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
Test IDs:	1.3.6.1.4.1.25623.1.0.11989
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0904 BugTraq ID: 9118 http://www.securityfocus.com/bid/9118 BugTraq ID: 9409 http://www.securityfocus.com/bid/9409 CERT/CC vulnerability note: VU#530660 http://www.kb.cert.org/vuls/id/530660 Microsoft Security Bulletin: MS04-002 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-002 http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0311&L=ntbugtraq&F=P&S=&P=9281 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A477 http://secunia.com/advisories/10615 XForce ISS Database: exchange-owa-account-access(13869) https://exchange.xforce.ibmcloud.com/vulnerabilities/13869