PT-2002-2595 · Microsoft · Exchange Server+1

Published 2002-12-31 · Updated 2020-04-09 · CVE-2002-1873

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange version 2000

Description The issue allows remote attackers to cause a denial of service, resulting in a crash or memory consumption, via malformed MSRPC calls when used with Microsoft Remote Procedure Call (MSRPC).

Recommendations For Microsoft Exchange version 2000, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2002-1873

Affected Products

Msrpc

Exchange Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1873 · Security Note
• http://iss.net/security_center/static/9789.php · Note
• http://online.securityfocus.com/archive/1/286220 · Note
• http://securityfocus.com/bid/5412 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1873 · Note