Microsoft Exchange Server EMSMDB2 MAPI Command Remote Denial of Service Vulnerability

2009-02-10T00:00:00
ID SMNTC-33136
Type symantec
Reporter Symantec Security Response
Modified 2009-02-10T00:00:00

Description

Description

Microsoft Exchange Server is prone to a remote denial-of-service vulnerability. A successful exploit allows a remote attacker to cause the application to stop responding, denying service to legitimate users.

Technologies Affected

  • Avaya Messaging Application Server
  • Avaya Messaging Application Server MM 1.1
  • Avaya Messaging Application Server MM 2.0
  • Avaya Messaging Application Server MM 3.0
  • Avaya Messaging Application Server MM 3.1
  • Microsoft Exchange Server 2000
  • Microsoft Exchange Server 2000 SP1
  • Microsoft Exchange Server 2000 SP2
  • Microsoft Exchange Server 2000 SP3
  • Microsoft Exchange Server 2003
  • Microsoft Exchange Server 2003 SP1
  • Microsoft Exchange Server 2003 SP2
  • Microsoft Exchange Server MAPI Client 1.2.1

Recommendations

Block external access at the network boundary, unless external parties require service.
Filter access to the affected computer at the network boundary if global access isn't required. Restricting access to only trusted computers and networks might greatly reduce the likelihood of exploits.

Deploy network intrusion detection systems to monitor network traffic for malicious activity.
Deploy NIDS to monitor network traffic for anomalous or suspicious activity. Monitor logs generated by NIDS and by the server itself for evidence of attacks against the server.

Fixes are available; please see the references for more information.