CVE-2019-0798 : Security Advisory and Response

A spoofing vulnerability in Skype for Business Server 2015 and Microsoft Lync Server 2013 allows specially crafted requests to bypass security measures.

Understanding CVE-2019-0798

What is CVE-2019-0798?

This vulnerability, known as the 'Skype for Business and Lync Spoofing Vulnerability,' occurs when Lync Server or Skype for Business Server fails to properly sanitize specific requests, enabling spoofing attacks.

The Impact of CVE-2019-0798

The presence of this vulnerability can lead to spoofing attacks, compromising the integrity and security of affected systems.

Technical Details of CVE-2019-0798

Vulnerability Description

The vulnerability arises from inadequate cleansing of specially designed requests, allowing malicious actors to spoof legitimate users or services.

Affected Systems and Versions

Skype for Business Server 2015 with March 2019 Update
Microsoft Lync Server 2013 with July 2018 Update

Exploitation Mechanism

Malicious entities can exploit this vulnerability by crafting requests in a way that tricks the server into accepting them as legitimate, leading to spoofing incidents.

Mitigation and Prevention

Immediate Steps to Take

Apply security patches provided by Microsoft promptly.
Monitor network traffic for any suspicious activities.
Implement strict access controls to limit unauthorized access.

Long-Term Security Practices

Regularly update and patch software to address known vulnerabilities.
Conduct security training for employees to recognize and report potential security threats.

Patching and Updates

Ensure that all affected systems are updated with the latest security patches to mitigate the risk of exploitation.