PT-2007-1695 · Microsoft · Exchange Server

Joseph W Pruszynski · Publicado 2007-05-08 · Atualizado 2020-04-09 · CVE-2007-0213

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2000 SP3, 2003 SP1 and SP2, and 2007

Description A remote code execution issue exists due to improper decoding of certain MIME encoded e-mails, allowing attackers to execute arbitrary code via crafted base64-encoded MIME e-mail messages. This is caused by the way Microsoft Exchange Server decodes specially crafted e-mail messages. An attacker could exploit this by sending a specially crafted e-mail to a Microsoft Exchange Server user account, potentially taking complete control of an affected system.

Recommendations For Microsoft Exchange Server versions 2000 SP3, 2003 SP1 and SP2, and 2007, consider restricting the handling of base64-encoded MIME e-mail messages until a proper fix is applied. As a temporary workaround, consider disabling the decoding of specially crafted e-mail messages to minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-0213

Produtos afetados

Exchange Server

Referências · 18

• 🔥 https://exploit-db.com/exploits/47076 · Exploit
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-026 · Nota
• http://frsirt.com/english/advisories/2007/1711 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0213 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0213 · Nota de Segurança
• http://kb.cert.org/vuls/id/343145 · Nota
• http://securitytracker.com/id?1018015 · Nota
• http://packetstormsecurity.com/files/153533/Microsoft-Exchange-2003-base64-MIME-Remote-Code-Execution.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0213 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1711 · Nota
• http://us-cert.gov/cas/techalerts/TA07-128A.html · Nota
• http://securityfocus.com/archive/1/468871/100/200/threaded · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33889 · Nota
• http://osvdb.org/34391 · Nota