PT-2005-1773 · Microsoft · Exchange Information Store+1

Publicado 2005-03-13 · Atualizado 2020-04-09 · CVE-2005-0738

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2003 SP1

Description A stack consumption issue allows users to cause a denial of service by deleting or moving a folder with deeply nested subfolders. This action causes the Microsoft Exchange Information Store service to hang due to a large number of recursive calls.

Recommendations For Microsoft Exchange Server 2003 SP1, consider restricting the ability to delete or move folders with deeply nested subfolders to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2005-0738

Produtos afetados

Exchange Information Store

Exchange Server

Referências · 4

• http://secunia.com/advisories/14543 · Aviso do Fabricante
• http://support.microsoft.com/?kbid=891504 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0738 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0738 · Nota