CVE-2005-0560 Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X...
HighCVSS 7.5
EPSS 73.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft exchange server | = 2000 | No fix listed |
| Microsoft exchange server | = 2003 | No fix listed |
References
- 20050419 MS05-021 Microsoft Exchange X-LINK2STATE Heap Overflow PoC mailing-list third-party-advisory
- 14920 patch third-party-advisory
- VU#275193 patch third-party-advisory us-government-resource
- 15467 broken-link vdb-entry
- TA05-102A patch third-party-advisory us-government-resource
- 20050412 Microsoft Exchange Remote Compromise broken-link third-party-advisory
- MS05-021 patch vendor-advisory
- oval:org.mitre.oval:def:4032 signature third-party-advisory vdb-entry