PT-2005-1773 · Microsoft · Exchange Information Store+1

Published 2005-03-13 · Updated 2020-04-09 · CVE-2005-0738

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2003 SP1

Description A stack consumption issue allows users to cause a denial of service by deleting or moving a folder with deeply nested subfolders. This action causes the Microsoft Exchange Information Store service to hang due to a large number of recursive calls.

Recommendations For Microsoft Exchange Server 2003 SP1, consider restricting the ability to delete or move folders with deeply nested subfolders to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2005-0738

Affected Products

Exchange Information Store

Exchange Server

References · 4

• http://secunia.com/advisories/14543 · Vendor Advisory
• http://support.microsoft.com/?kbid=891504 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0738 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0738 · Note