PT-2002-2598 · Microsoft · Exchange 2000+1

Publicado 2002-12-31 · Atualizado 2020-04-09 · CVE-2002-1876

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange 2000

Description The issue allows remote authenticated attackers to cause a denial of service by sending a large number of rapid requests. This action consumes all of the licenses that are granted to Exchange by IIS.

Recommendations For Microsoft Exchange 2000, consider implementing rate limiting on incoming requests to prevent excessive consumption of licenses. As a temporary workaround, restrict access to the server to minimize the risk of denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2002-1876

Produtos afetados

Iis

Exchange 2000

Referências · 5

• 🔥 http://securityfocus.com/bid/5413 · Exploit
• http://iss.net/security_center/static/9791.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1876 · Nota de Segurança
• http://online.securityfocus.com/archive/1/286220 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1876 · Nota