Lucene search

K
nessusTenable5510.PRM
HistoryApr 13, 2010 - 12:00 a.m.

MS10-024: Microsoft Exchange and Windows SMTP Service DoS (981832)

2010-04-1300:00:00
Tenable
www.tenable.com
6

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.258 Low

EPSS

Percentile

96.7%

The installed version of Windows SMTP Service is affected by at least one vulnerability :

  • Incorrect parsing of DNS Mail Exchanger (MX) resource records could cause the Windows Simple Mail Transfer Protocol (SMTP) component to stop responding until the service is restarted. (CVE-2010-0024)

  • Improper allocation of memory for interpreting SMTP command responses may allow an attacker to read random e-mail message fragments stored on the affected server. (CVE-2010-0025)

Binary data 5510.prm
VendorProductVersionCPE
microsoftwindowscpe:/o:microsoft:windows

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.258 Low

EPSS

Percentile

96.7%