CVE-2003-0714 The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a cer...
HighCVSS 7.5
EPSS 77.6%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft exchange server | = 5.5 | No fix listed |
| Microsoft exchange server | = 5.5-sp1 | No fix listed |
| Microsoft exchange server | = 5.5-sp2 | No fix listed |
| Microsoft exchange server | = 5.5-sp3 | No fix listed |
| Microsoft exchange server | = 5.5-sp4 | No fix listed |
| Microsoft exchange server | = 2000 | No fix listed |
| Microsoft exchange server | = 2000-sp1 | No fix listed |
| Microsoft exchange server | = 2000-sp2 | No fix listed |
| Microsoft exchange server | = 2000-sp3 | No fix listed |
References
- 20031022 MS03-046 Microsoft Exchange 2000 Heap Overflow mailing-list third-party-advisory
- CA-2003-27 third-party-advisory us-government-resource
- VU#422156 patch third-party-advisory us-government-resource
- 8838 exploit patch third-party-advisory vdb-entry
- MS03-046 patch vendor-advisory