Description: Microsoft has issued patches for Exchange to fix a buffer overflow vulnerability in the SMTP service.
The vulnerability may be exploited by sending a maliciously crafted parameter to an extended verb request.
Exchange 5.5 is only vulnerable to a Denial of Service.
Exchange 2000 is also vulnerable to execution of arbitrary code.
Exchange 2003 is not affected.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector.
Solution: A SMTP gateway or application level firewall may prevent exploitation of these vulnerabilities.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
