PT-2002-2598 · Microsoft · Exchange 2000+1

Published 2002-12-31 · Updated 2020-04-09 · CVE-2002-1876

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange 2000

Description The issue allows remote authenticated attackers to cause a denial of service by sending a large number of rapid requests. This action consumes all of the licenses that are granted to Exchange by IIS.

Recommendations For Microsoft Exchange 2000, consider implementing rate limiting on incoming requests to prevent excessive consumption of licenses. As a temporary workaround, restrict access to the server to minimize the risk of denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2002-1876

Affected Products

Iis

Exchange 2000

References · 5

• 🔥 http://securityfocus.com/bid/5413 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1876 · Security Note
• http://iss.net/security_center/static/9791.php · Note
• http://online.securityfocus.com/archive/1/286220 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1876 · Note