8 matches found
Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability (981832)
This host is missing a critical security update according to Microsoft Bulletin MS10-024. OpenVAS Vulnerability Test $Id: secpodms10-024.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability 981832 Authors: Veerendra G Copyright: Copyrigh...
iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability
Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Exchange Server 2000 is a messaging product developed by Microsoft, part of the Windows Server...
CVE-2007-0221
Integer overflow in the IMAP IMAP4 support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service service hang via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."...
Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability
Description Microsoft Exchange is prone to a remote code-execution vulnerability because the application fails to properly decode specially crafted email messages. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the vulnerable application,...
Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (PoC) (MS03-046)
Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow PoC MS03-046 !/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even...
MS02-025: Exchange 2000 Exhaust CPU Resources (320436)
The remote host is running Exchange Server 2000. The remote version of this software contains a flaw that allows an attacker to cause a temporary denial of service. To do this, the attacker needs to send an email message with malformed attributes. CPU utilization will spike at 100% until the...
CVE-2002-0049
The CVE-2002-0049 issue is validated by connected sources describing a misconfigured WinReg permissions in Microsoft Exchange 2000 System Attendant. The registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg becomes world-writeable, enabling non-admins (via remote registry ac...
Security Update for Windows Server 2003 (KB883935)
A security issue has been identified that could allow an attacker to compromise your Windows, Exchange 2000 Server, or Exchange Server 2003-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...