85 matches found
CVE-2002-1876
Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS...
CVE-2002-1117
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...
CVE-2002-0055
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...
CVE-2001-1099
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice...
CVE-2002-0055
CVE-2002-0055 affects the SMTP service in Windows 2000, Windows XP Professional, and Exchange 2000. The vulnerability is triggered by a malformed BDAT data transfer request, allowing remote denial-of-service by an attacker. Connected documents corroborate this and reference MS02-012 (MSKB 313450)...
CVE-2001-1099
The CVE-2001-1099 entry describes a vulnerability in Norton AntiVirus for Microsoft Exchange 2000 (2.x) where the default configuration can leak the recipient’s INBOX file path. An attacker who sends an email with a malicious attachment can trigger a rejection notice that reveals the path, enabli...
CVE-2001-1099: Unrestricted Upload of File with Dangerous Type
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice...
CVE-2002-0055: Incorrect Resource Transfer Between Spheres
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...
CVE-2002-0368
The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service CPU consumption via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."...
Microsoft Exchange 2000 exhausts server resources while attempting to process malformed mail attributes
Overview Microsoft Exchange 2000 contains a vulnerability that allows remote attackers to conduct a denial-of-service attack that once begun, cannot be stopped until the crafted message has been completely processed. Description Microsoft Exchange 2000 contains a vulnerability in its handling of...
CVE-2001-0666
Outlook Web Access (OWA) in Microsoft Exchange 2000 is affected. An authenticated user can trigger a denial of service (CPU consumption) by sending a malformed OWA request for a deeply nested folder in the user’s mailbox, exploiting a vulnerability in OWA request handling. Affected component: OWA...
CVE-2001-0666
Outlook Web Access OWA in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service CPU consumption via a malformed OWA request for a deeply nested folder within the user's mailbox...
CVE-2001-0666: Uncontrolled Resource Consumption
Outlook Web Access OWA in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service CPU consumption via a malformed OWA request for a deeply nested folder within the user's mailbox...
CVE-2002-0055
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...
Слабые разрешения реестра в Microsoft Exchange 2000 (weak permissions)
Группе Everyone разрешение на доступ к разделу WinReg, что позволяет подключаться к реестру удаленно...
Security Bulletin MS01-049
---------------------------------------------------------------------- Title: Deeply-nested OWA Request Can Consume Server CPU Availability Date: 26 September 2001 Software: Exchange 2000 Impact: Denial of Service Bulletin: MS01-049 Microsoft encourages customers to review the Security Bulletin...
CVE-2001-0340
An issue in Outlook Web Access (OWA) for Microsoft Exchange 2000 Server and Internet Explorer lets a malicious HTML attachment execute script when opened via OWA, with the script running under the OWA user’s privileges and potentially accessing/manipulating messages and folders on the server. Exp...
CVE-2001-0340: Unrestricted Upload of File with Dangerous Type
An interaction between the Outlook Web Access OWA service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically...
Microsoft Windows 2000 Internet Information Server (IIS) and Exchange 2000 vulnerable to DoS via malformed URL (MS01-014)
Overview A vulnerability that affects Microsoft IIS 5.0 and Exchange 2000 allows an intruder to disrupt IIS web services and web-based mail services served via an Exchange server. Description Microsoft IIS 5.0 contains a vulnerability that allows an intruder to cause a memory allocation error by...
CVE-2001-1099
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice...