Microsoft Exchange Server and Microsoft Outlook TNEF messages format buffer overflow

Buffer overflow on parsing TNEF format...

IMC SMTP EHLO Buffer Overrun

A security vulnerability results because of an unchecked buffer in the IMC code that generates the response to the EHLO protocol command. SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

CVE-2005-1987

CVE-2005-1987 is a remote code execution vulnerability in Microsoft Collaboration Data Objects (CDO) used by CDOSYS/CDOEX on Windows and Exchange. An unchecked buffer triggered by processing a malformed SMTP/email header (e.g., oversized Content-Type) can allow an attacker to execute arbitrary co...

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

Microsoft Collaboration Data Objects Remote Buffer Overflow Vulnerability

Description Microsoft CDO is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the library to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. This issue presents itself when an attacker sends a...

Microsoft Exchange Server Outlook Web Access HTML Injection Vulnerability

Description Outlook Web Access is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the affected application of an unsuspecting user in...

MS Exchange Server Remote Code Execution Exploit (MS05-021)

漏洞描述：Microsoft Exchange是一款由微软开发的邮件服务程序。Microsoft Exchange Server中存在缓冲区溢出漏洞，攻击者可能利用此漏洞在主机上执行任意指令。 起因是Exchange SMTP Server在处理特殊的扩展SMTP verb时存在缓冲区溢出。漏洞可能允许攻击者连接到Exchange服务器的SMTP端口并发送精心构造的恶意命令，这些命令可能导致拒绝服务或以SMTP服务进程的权限运行攻击者所选择的代码。漏洞影响：受影响的软件： •Microsoft Exchange Server 2000 Service Pack 3 •Microsoft...

Microsoft Exchange Server - Remote Code Execution (MS05-021)

Microsoft Exchange Server - Remote Code Execution MS05-021 !/bin/perl MS05-021 Exchange X-LINK2STATE Heap Overflow Author: Evgeny Pinchuk For educational purposes only. Tested on: Windows 2000 Server SP4 EN Microsoft Exchange 2000 SP3 Thanks and greets: Halvar Flake thx for the right directions...

Microsoft Security Bulletin MS05-021 Vulnerability in Exchange Server Could Allow Remote Code Execution (894549)

Microsoft Security Bulletin MS05-021 Vulnerability in Exchange Server Could Allow Remote Code Execution 894549 Issued: April 12, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Exchange Server Impact of Vulnerability: Remote Code Execution Maximum Severity...

Microsoft Exchange Server contains unchecked buffer in SMTP extended verb handling

Overview A vulnerability in some versions of Microsoft's Exchange Server may allow a remote attacker to execute arbitrary code on an affected server. Description Microsoft's Exchange Server supports a number of protocols for handling email, including the Simple Mail Transfer Protocol SMTP and SMT...

CVE-2005-0738

Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service hang by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service Store.exe to hang as a result of a large number of recursive...

CVE-2005-0738: Uncontrolled Resource Consumption

Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service hang by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service Store.exe to hang as a result of a large number of recursive...

Microsoft Security Bulletin MS04-036 Vulnerability in NNTP Could Allow Remote Code Execution (883935)

Microsoft Security Bulletin MS04-036 Vulnerability in NNTP Could Allow Remote Code Execution 883935 Issued: October 12, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows or Microsoft Exchange Server Impact of Vulnerability: Remote Code Execution Maximum...

Microsoft Security Bulletin MS04-035 Vulnerability in SMTP Could Allow Remote Code Execution (885881)

Microsoft Security Bulletin MS04-035 Vulnerability in SMTP Could Allow Remote Code Execution 885881 Issued: October 12, 2004 Version: 1.0 Summary Who should read this document: System administrators who use Microsoft Exchange Server 2003, Windows XP 64-Bit Edition Version 2003, or Windows Server...

Microsoft NNTP Component Heap Overflow Vulnerability

Description The Microsoft Network News Transfer Protocol NNTP Component is prone to a buffer overflow condition. Successful exploitation of this vulnerability could allow remote code execution in the context of the process accessing the vulnerable component. Technologies Affected Avaya DefinityOn...

Microsoft Outlook Web Access (OWA) Version Detection

Microsoft Exchange Server with Outlook Web Access OWA embeds the Exchange version number inside the default HTML web page. By requesting the default HTML page, Nessus was able to extract the Microsoft Exchange server version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Microsoft Exchange Outlook Web Access HTTP Response Splitting Vulnerability

Description Microsoft Exchange Outlook Web Access OWA is prone to HTTP response splitting attacks. This issue could permit hostile script to be injected into client sessions, which could gain access to properties of the OWA server and Web pages hosted on the site. It is noted that the attacker mu...

Microsoft ASN.1 Library Length Integer Mishandling Memory Corruption Vulnerability

Description A vulnerability has been reported in the Microsoft ASN.1 library. This issue is related to insufficient checking of data supplied via an externally supplied length field in ASN.1 BER encoded data. This could result in an excessive value being used in a heap allocation routine, allowin...

Microsoft Exchange Server 2003 fails to assign user credentials to proper mailbox

Overview A flaw in the authentication mechanism that Microsoft Exchange Server 2003 uses for Outlook Web Access users in some configurations could expose another user's mailbox. Description Outlook Web Access OWA is a feature of Microsoft Exchange Server 2003. By using OWA, a server that is runni...