high7.5Public exploit code
CVE-2003-0714
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connect…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (MS03-046) (Metasploit)2010-11-11 · remote · windows · Verified
- Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (PoC) (MS03-046)2003-10-22 · dos · windows · Verified
Impact
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Exchange Server | Versions 5.5, 2000 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=106682909006586&w=2
- http://www.cert.org/advisories/CA-2003-27.html
- http://www.kb.cert.org/vuls/id/422156
- http://www.securityfocus.com/bid/8838
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-046
- http://marc.info/?l=bugtraq&m=106682909006586&w=2
- http://www.cert.org/advisories/CA-2003-27.html
- http://www.kb.cert.org/vuls/id/422156
- http://www.securityfocus.com/bid/8838
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-046