PT-2010-5176 · Microsoft · Exchange Server 2007+1

Oleksandr Mirosh · Published 2010-12-14 · Updated 2020-04-09 · CVE-2010-3937

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2007 SP2 on the x64 platform Microsoft Exchange 2007

Description A denial of service issue exists due to the way the Microsoft Exchange store processes specially crafted RPC calls. The vulnerable code path is only accessible to authenticated users. An authenticated attacker could exploit this by sending a specially crafted network message to a computer running the Exchange service, causing the Exchange service to stop responding until manually restarted.

Recommendations For Microsoft Exchange Server 2007 SP2 on the x64 platform, consider restricting access to the RPC endpoint to minimize the risk of exploitation. For Microsoft Exchange 2007, restrict access to the vulnerable code path to prevent authenticated attackers from sending specially crafted network messages. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-3937

ZDI-10-286

Affected Products

Exchange Server

Exchange Server 2007

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2010-3937 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-10-286 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3937 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-106 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3937 · Note
• http://securitytracker.com/id?1024888 · Note
• http://securityfocus.com/bid/45297 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12019 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-106 · Note
• http://us-cert.gov/cas/techalerts/TA10-348A.html · Note