CVE-2009-1491: Improper Input Validation

McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a...

CVE-2007-0221

Integer overflow in the IMAP IMAP4 support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service service hang via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."...

Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability

Description Microsoft Exchange is prone to a remote code-execution vulnerability because the application fails to properly decode specially crafted email messages. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the vulnerable application,...

CVE-2007-0221: Integer Overflow or Wraparound

Integer overflow in the IMAP IMAP4 support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service service hang via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."...

CVE-2006-1193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access OWA, allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."...

Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (PoC) (MS03-046)

Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow PoC MS03-046 !/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even...

CVE-2002-0049: Improper Privilege Management

Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys...

CVE-2001-0509: Improper Input Validation

Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...