CVE-1999-1368

Technical details about CVE-1999-1368 are not publicly provided in the supplied documents; no explicit affected products, versions, or remediation are listed. Monitor for updates.

CVE-1999-1043

Technical details about CVE-1999-1043 are not available in the supplied documents. No information on affected versions beyond Exchange Server 5.x, exploitation, or remediation is provided here; monitor for updates.

CVE-1999-1043

Microsoft Exchange Server 5.5 and 5.0 does not properly handle 1 malformed NNTP data, or 2 malformed SMTP data, which allows remote attackers to cause a denial of service application error...

CVE-2000-1006

Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability...

CVE-2000-1006

CVE-2000-1006 affects Microsoft Exchange Server 5.5 and relates to vulnerable MIME header handling when a blank charset is specified (charset=""). The issue allows a remote attacker to cause a denial-of-service condition by sending malformed MIME headers. The vulnerability is associated with Exch...

Exchange Malformed MIME Header Handling DoS

The remote Exchange server seems to be vulnerable to a flaw that lets malformed MIME headers crash it. Nessus did not actually test for these flaws - it just relied on the banner to identify them. Therefore, this warning may be a false positive - especially since the banner DOES NOT CHANGE if the...

InoculateIT AV Option for MS Exchange Server

The scenario is two EX Srvrs, two different organizations and different sites, both have CA's "InoculateIT AV Option for MS Exchange Server". MS IMC the EX SMTP gateway will be used to send messages between the EX Srvrs. Where the Agent fails: 1. If a message is sent from one EX to another using...

CA's InoculateIT Agent for Exchange Server

Hi, I'm new in the list, my 1st msg: The CA's InoculateIT Agent for Exchange Server cannot detect some messages that have the SMTP headers changed. In October/1999 I reported it to local CA support office, but still now nothing have done. Guys at [email protected] seem to ignore my messages. The bug...

Security Bulletin (MS00-082)

Microsoft Security Bulletin MS00-082 - -------------------------------------- Patch Available for "Malformed MIME Header" Vulnerability Originally posted: October 31, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Exchange Server 5.5. Th...

RE: Re[3]: Possible Exchange 5.5 Server DoS [msrc 421]

Hello 3APA3A, Thanks again for your note. Due to the timeframe of Exchange SP4 we will including a fix for this issue in that Service Pack. If you want any future status on this issue please refer to MSRC 421. Regards, [email protected] -----Original Message----- From: 3APA3A...

Possible Exchange 5.5 Server DoS

exerror.zip This happend early this morning on one of our mailservers running Exchange 5.5 on WinNT4 OP5. Suddenly the Information Store STORE.EXE crashed with a strange error saying something in the way of "Error while processing an email message", restarting both the server and all of Exchange'...

Re: Possible Exchange 5.5 Server DoS

Hello Christer Enberg, 12.09.2000 10:30, you wrote: Possible Exchange 5.5 Server DoS; C queues and then restart exchange. C It seems that the attachment line is the problem, by removing the attachment C and sending the mail nothing happens. The problem is probably in Content-Type: field...

Microsoft refuses to fix a security bug in Windows 2000

Microsoft refuses to fix a security bug in Windows 2000 Eugene Kalinin Medical Informatics Laboratory Moscow, Russia Aug 16, 2000 Yesterday Microsoft refused to fix a security problem in Windows 2000 RPC service. The bug in RPC service allows an attacker to put a Windows 2000 server out of servic...

MS Exchange Server 5.5: POP3 & IMAP Authentication Problem -> BUG

Hi, I found a little issue with a possible misconfiguration with Exchange Server 5.5 and Windows NT Server 4.0 . If the value LMCompatibilityLevel is added to the registry and set to 5 on a NT server that is running Exchange Server 5.5 running POP3 or IMAP4, a client will no longer be able to...

CVE-1999-1043

Microsoft Exchange Server 5.5 and 5.0 does not properly handle 1 malformed NNTP data, or 2 malformed SMTP data, which allows remote attackers to cause a denial of service application error...

ms.exchange.outlook.javascript.txt

Date: Fri, 5 Mar 1999 11:30:56 -0000 From: Mat Newman To: "'[email protected]'" Subject: Exchange server web access You may have heard about this but... If someone is accessing Exchange server via the web then you can embed javascript into the email to get it to delete the contents of...

ca.inoculateit.nt.txt

Date: Wed, 12 May 1999 09:52:59 -0500 From: Bob Duffett To: [email protected] Subject: InoculateIT 4.53 Real-Time Exchange Scanner Flawed Manufacturer: Computer Associates Product: InoculateIT for Windows NT v4.53 Build 169, Agent for Microsoft Exchange This product has a major...

Microsoft Exchange Server 4.05.0 - SMTP HELO Argument Buffer Overflow

Microsoft Exchange Server 4.05.0 - SMTP HELO Argument Buffer Overflow // source: https://www.securityfocus.com/bid/8555/info It has been reported that Microsoft Exchange server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to...

Microsoft Exchange Server 4.0/5.0 - SMTP HELO Argument Buffer Overflow

// source: https://www.securityfocus.com/bid/8555/info It has been reported that Microsoft Exchange server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bounds checking performed when handling malicious SMTP HELO...

PT-1998-1059 · Ipswitch +2 · Ipswitch +2

Name of the Vulnerable Software and Affected Versions: NT mail servers including Ipswitch, Mdaemon, and Exchange affected versions not specified Description: The issue allows for denial of service to NT mail servers through a buffer overflow in the SMTP HELO command. Recommendations: At the momen...