PT-2001-1092 · Microsoft · Exchange Server

Publicado 2001-03-12 · Atualizado 2020-04-02 · CVE-1999-0945

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange versions 5.0 through 5.5

Description A buffer overflow issue in the Internet Mail Service (IMS) of Microsoft Exchange allows remote attackers to conduct a denial of service attack. This can be achieved via AUTH or AUTHINFO commands.

Recommendations For Microsoft Exchange versions 5.0 through 5.5, consider restricting access to the AUTH and AUTHINFO commands as a temporary workaround to minimize the risk of exploitation.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-1999-0945

Produtos afetados

Exchange Server

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-1999-0945 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0945 · Nota
• http://ciac.org/ciac/bulletins/i-080.shtml · Aviso do Fabricante
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ169174 · Nota
• http://xforce.iss.net/alerts/advise4.php · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1223 · Nota