Secunia

Description

A vulnerability has been identified in Windows 2000 Server and Exchange Server 2000, which can be exploited by malicious people to cause a DoS (Denial of Service) on the SMTP service.

The vulnerability is caused due to an error when handling emails with invalid timestamps. This can be exploited by sending an email with a specially crafted FILETIME attribute, which will crash the SMTP service or cause it to stop responding.

According to Microsoft, the vulnerability exists in the following products:
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP3
- Microsoft Exchange 2000 Server

Solution
Apply Windows 2000 Service Pack 4:
Further details available in Customer Area

Original Advisory
http://support.microsoft.com/default.aspx?kbid=330716

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area