PT-2001-1092 · Microsoft · Exchange Server

Published 2001-03-12 · Updated 2020-04-02 · CVE-1999-0945

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange versions 5.0 through 5.5

Description A buffer overflow issue in the Internet Mail Service (IMS) of Microsoft Exchange allows remote attackers to conduct a denial of service attack. This can be achieved via AUTH or AUTHINFO commands.

Recommendations For Microsoft Exchange versions 5.0 through 5.5, consider restricting access to the AUTH and AUTHINFO commands as a temporary workaround to minimize the risk of exploitation.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-1999-0945

Affected Products

Exchange Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-1999-0945 · Security Note
• http://ciac.org/ciac/bulletins/i-080.shtml · Vendor Advisory
• http://xforce.iss.net/alerts/advise4.php · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0945 · Note
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ169174 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1223 · Note