PT-2007-1695 · Microsoft · Exchange Server

Joseph W Pruszynski · Published 2007-05-08 · Updated 2020-04-09 · CVE-2007-0213

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2000 SP3, 2003 SP1 and SP2, and 2007

Description A remote code execution issue exists due to improper decoding of certain MIME encoded e-mails, allowing attackers to execute arbitrary code via crafted base64-encoded MIME e-mail messages. This is caused by the way Microsoft Exchange Server decodes specially crafted e-mail messages. An attacker could exploit this by sending a specially crafted e-mail to a Microsoft Exchange Server user account, potentially taking complete control of an affected system.

Recommendations For Microsoft Exchange Server versions 2000 SP3, 2003 SP1 and SP2, and 2007, consider restricting the handling of base64-encoded MIME e-mail messages until a proper fix is applied. As a temporary workaround, consider disabling the decoding of specially crafted e-mail messages to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-0213

Affected Products

Exchange Server

References · 18

• 🔥 https://exploit-db.com/exploits/47076 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0213 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0213 · Security Note
• http://securityfocus.com/archive/1/468871/100/200/threaded · Vendor Advisory
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-026 · Note
• http://frsirt.com/english/advisories/2007/1711 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0213 · Note
• http://kb.cert.org/vuls/id/343145 · Note
• http://securitytracker.com/id?1018015 · Note
• http://packetstormsecurity.com/files/153533/Microsoft-Exchange-2003-base64-MIME-Remote-Code-Execution.html · Note
• http://vupen.com/english/advisories/2007/1711 · Note
• http://us-cert.gov/cas/techalerts/TA07-128A.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33889 · Note
• http://osvdb.org/34391 · Note