Nessus Plugin #11889

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Exchange XEXCH50 Remote Buffer Overflow

Family:

SMTP problems

Category:

infos

Copyright:

This script is Copyright (C) 2003 Digital Defense Inc.

Summary:

Tests to see if authentication is required for the XEXCH50 command

Version:

$Revision: 1.8 $

Cve_id:

CAN-2003-0714

Bugtraq_id:

8838

Xrefs:

IAVA:2003-A-0031

Description:

This system appears to be running a version of the Microsoft Exchange
SMTP service that is vulnerable to a flaw in the XEXCH50 extended verb.
This flaw can be used to completely crash Exchange 5.5 as well as execute
arbitrary code on Exchange 2000.

Solution : See http://www.microsoft.com/technet/security/bulletin/MS03-046.mspx
Risk factor : High