PT-2006-1098 · Microsoft · Exchange 5.0 Server+3

John Heasman + 1 · Published 2006-01-10 · Updated 2020-04-09 · CVE-2006-0002

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook versions 2000 through 2003 Microsoft Exchange 5.0 Server version SP2 Microsoft Exchange 5.0 Server version SP4 Microsoft Exchange 2000 version SP3 Microsoft Office (affected versions not specified)

Description: The issue is related to a remote code execution vulnerability due to improper decoding of Transport Neutral Encapsulation Format (TNEF) MIME attachments in e-mail messages. This allows remote attackers to execute arbitrary code via a crafted attachment. The vulnerability is also related to message length validation.

Recommendations: For Microsoft Outlook versions 2000 through 2003, consider disabling the handling of TNEF MIME attachments until a fix is available. For Microsoft Exchange 5.0 Server versions SP2 and SP4, restrict access to TNEF encoded messages to minimize the risk of exploitation. For Microsoft Exchange 2000 version SP3, avoid processing e-mail messages with crafted TNEF attachments until the issue is resolved. For Microsoft Office, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0002

Affected Products

Exchange 2000

Exchange 5.0 Server

Office

Outlook

References · 34

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0002 · Security Note
• http://us-cert.gov/cas/techalerts/TA06-010A.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0002 · Security Note
• http://securityfocus.com/bid/16197 · Patch
• http://securitytracker.com/id?1015460 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-003 · Vendor Advisory
• http://securitytracker.com/id?1015461 · Patch
• http://secunia.com/advisories/18368 · Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1485 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1456 · Note
• http://securityreason.com/securityalert/331 · Note
• http://frsirt.com/english/advisories/2006/0119 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1165 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1316 · Note