PT-2010-5176 · Microsoft · Exchange Server 2007+1
Oleksandr Mirosh
·
Publicado
2010-12-14
·
Atualizado
2020-04-09
·
CVE-2010-3937
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Microsoft Exchange Server 2007 SP2 on the x64 platform
Microsoft Exchange 2007
Description
A denial of service issue exists due to the way the Microsoft Exchange store processes specially crafted RPC calls. The vulnerable code path is only accessible to authenticated users. An authenticated attacker could exploit this by sending a specially crafted network message to a computer running the Exchange service, causing the Exchange service to stop responding until manually restarted.
Recommendations
For Microsoft Exchange Server 2007 SP2 on the x64 platform, consider restricting access to the RPC endpoint to minimize the risk of exploitation.
For Microsoft Exchange 2007, restrict access to the vulnerable code path to prevent authenticated attackers from sending specially crafted network messages.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Exchange Server
Exchange Server 2007