Microsoft Exchange Server IMAP Command Denial of Service (MS07-026; CVE-2007-0221)

An integer overflow vulnerability has been reported in Microsoft Exchange Server...

iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability

Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Exchange Server 2000 is a messaging product developed by Microsoft, part of the Windows Server...

CVE-2007-0221

CVE-2007-0221 is the IMAP Literal Processing Vulnerability in Microsoft Exchange Server 2000 SP3. The issue is an integer overflow in the IMAP4 service when processing literals in IMAP commands, allowing remote attackers to cause a denial of service (service hang). Connected advisories confirm th...