How to Fix a Bug in Exchange

Exchange is the server that powers Microsoft's groupware. A lot of people don't use their own anymore because it's also a really difficult server to keep up on running. So one of them takes an authenticated user and allows that user to inject arbitrary code into the server.