|
Microsoft Exchange SMTP Extended Request Buffer Overflow
|
|
Secunia Advisory:
|
SA10015
|
|
|
Release Date:
|
2003-10-15
|
|
Last Update:
|
2003-10-16
|
|
Popularity:
|
10,285 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Microsoft Exchange 2000 Enterprise Server
Microsoft Exchange 5.5
Microsoft Exchange Server 2000
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Microsoft has issued patches for Exchange to fix a buffer overflow vulnerability in the SMTP service.
The vulnerability may be exploited by sending a maliciously crafted parameter to an extended verb request.
Exchange 5.5 is only vulnerable to a Denial of Service.
Exchange 2000 is also vulnerable to execution of arbitrary code.
Exchange 2003 is not affected.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
