CERTA-2002-AVI-114

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été découverte dans la gestion de certains méls mal formés pour le logiciel de messagerie Microsoft Exchange 2000.

Description

Microsoft Echange 2000 respecte les standards décrits dans les RFC 821 et 822 pour la réception des méls envoyés par des systèmes hétérogènes. La méthode de gestion des méls reçus mals formés présente une vulnérabilité pouvant être exploitée par un individu mal intentionné afin d'effectuer un déni de service sur le serveur de messagerie.

Solution

Appliquer le correctif fourni par Microsoft (cf. Documentation).

Microsoft Exchange 2000.

Impacted products
Vendor Product Description
References

Show details on source website

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eMicrosoft Exchange 2000.\u003c/P\u003e",
  "content": "## Description\n\nMicrosoft Echange 2000 respecte les standards d\u00e9crits dans les RFC 821\net 822 pour la r\u00e9ception des m\u00e9ls envoy\u00e9s par des syst\u00e8mes h\u00e9t\u00e9rog\u00e8nes.\nLa m\u00e9thode de gestion des m\u00e9ls re\u00e7us mals form\u00e9s pr\u00e9sente une\nvuln\u00e9rabilit\u00e9 pouvant \u00eatre exploit\u00e9e par un individu mal intentionn\u00e9\nafin d\u0027effectuer un d\u00e9ni de service sur le serveur de messagerie.\n\n## Solution\n\nAppliquer le correctif fourni par Microsoft (cf. Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTA-2002-AVI-114",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2002-05-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans la gestion de certains m\u00e9ls mal\nform\u00e9s pour le logiciel de messagerie Microsoft Exchange 2000.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Microsoft Exchange 2000",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS02-025 de Microsoft",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS02-025.asp"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…