Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Windows : Microsoft Bulletins >> Exchange 2000 Exhaust CPU Resources (Q320436)

Vulnerability Assessment Details

Exchange 2000 Exhaust CPU Resources (Q320436)

Vulnerability Assessment Summary
Checks for MS Hotfix Q320436, DOS on Exchange 2000

Detailed Explanation for this Vulnerability Assessment

Summary :

It is possible to cause a DoS against the Mail Server.

Description :

The remote host is running Exchange Server 2000. The remote
version of this software contains a flaw wich may permit an
attacker to cause a denial of service.

To cause the DoS, the attacker needs to send a mail with
malformed attributes.

Solution :

Microsoft has released a set of patches for Exchange 2000 :

http://www.microsoft.com/technet/security/bulletin/ms02-025.mspx

Network Security Threat Level:

Medium / CVSS Base Score : 5
(AV:R/AC:L/Au:NR/C:N/A:C/I:N/B:A)

Networks Security ID: 4881

Vulnerability Assessment Copyright: This script is Copyright (C) 2005-2007 Tenable Network Security

Cables, Connectors