To support the exchange of mail with heterogeneous systems, Exchange messages use the attributes of SMTP mail messages that are specified by RFC's 821 and 822. There is a flaw in the way Exchange 2000 handles certain malformed RFC message attributes on received mail. Upon receiving a message containing such a malformation, the flaw causes the Store service to consume 100% of the available CPU in processing the message.
A security vulnerability results because it is possible for an attacker to seek to exploit this flaw and mount a denial of service attack. An attacker could attempt to levy an attack by connecting directly to the Exchange server and passing a raw, hand-crafted mail message with a specially malformed attribute. When the message was received and processed by the Store service, the CPU would spike to 100%. The effects of the attack would last as long as it took for the Exchange Store service to process the message. Neither restarting the service nor rebooting the server would remedy the denial of service.
Microsoft Exchange 2000 SP2
Like it? Share with your friends!
Other Windows Software of Developer «Microsoft»:
Automated video looping with progressive dynamism An application to extract a 5 second looping video from a non-looping input video. Also a viewer application to enable both interactive control over the level of dynamism of the output video, as well as manual editing of which regions animate or are static
Microsoft Outlook Hotmail Connector (32-Bit) With Microsoft Outlook Hotmail Connector 32-bit, you can use Microsoft Office Outlook 2003, Microsoft Office Outlook 2007 or Microsoft Office Outlook 2010 to access and manage your Microsoft Windows Live Hotmail or Microsoft Office Live Mail accounts, incl
Microsoft Surface Integration Driver for Windows 10 64-bit The package provides the installation files for Microsoft Surface Integration Driver version 2.0.304.0.In order to manually update your driver, follow the steps below (the next steps):1. Go to Device Manager (right click on My Computer, choose Manage and t
Gigabyte GA-F2A58M-S1 (rev. 3.2) Microsoft UAA Driver Key Features: - Socket FM2+ supports AMD FM2+/FM2 A-series APU - GIGABYTE Ultra Durable Technology - GIGABYTE On/Off Charge for USB devices - 1 PCI-E 2.0 x16 interface with AMD Dual Graphics support - Solid capacitors for APU VRM design - 8 USB 2.0 and 4 S
Microsoft Windows Small Business Server 2011 Standard Designed and priced for small businesses, Windows Small Business Server 2011 is an affordable server solution to help your business run more efficiently. It provides core functionality for:
Server and PC Backup
Advanced e-mail and
Visio 2003 Software Development Kit (SDK) The Visio 2003 SDK contains sample applications, code librarian code snippets, documentation, and tools, including the ShapeStudio, Event Monitor, Persistent Events, Print ShapeSheet, and Solution Publishing tools. The Microsoft Office Visio 2003 SDK provi
Microsoft Windows 2000 Update: DCDiag.exe Utility This utility analyzes the state of domain controllers in a forest or enterprise and reports any problems to assist in troubleshooting. As an end-user reporting program, DcDiag encapsulates detailed knowledge of how to identify abnormal behavior in the syst
Security Update for Excel Viewer 2003 (KB936508) A security vulnerability exists in Microsoft Office Excel Viewer 2003 that could allow arbitrary code to run when opening a malicious document. This update addresses that vulnerability. This version is the first release on CNET Download.com.What is new in
Magic File Magic File, the magic software can add a password to any files in your computer. Then when you use the encrypted file, you must input the right password, and if the password is right, you will run the file and use it. But you can do nothing when the passwo
Passwords Explorer SV2 Passwords Explorer is totally free and highly useful tool for reminding your lost passwords entered into different Windows applications including Internet Explorer Auto-complete Passwords. Application sits in traybar and wait while dialog or web-page w
Acronis Drive Cleanser Getting rid of an old PC, upgrading to a new hard drive, returning a leased computer, or redeploying a PC within your company? It is truly imperative to completely destroy all data from the old hard disk. Acronis Drive Cleanser 6.0 guarantees the complete
Spot Shop Software DESengine Server DESengine Server is an application used to convert unique key per device to a common communication key for transmission on an ATM/POS network. It uses TCP/IP to connect to your application so that cross platforms can be used. A remote management client is
GIMP Folder Lock is a data security solution that encrypt & secures your files, while keeping an automatic and real-time backup of encrypted files in the backup cloud. It also offers security for USB drives and CDs/DVDs. Folder Lock is an Anti-Hack Solution tha
WinSession Logger WinSession Logger is an advanced keylogger especially for English and Spanish keyboards, also you can monitor the PC for all of the following activity, all URLs visited by Internet Explorer, Firefox, Opera, Mozilla, Google Chrome, and filter inappropriate
SteganoG SteganoG store confidential data of any kind in a bitmap file that the image appears to be unchanged. A powerful compression and an adjustable image quality will also allow you to save relatively large amounts of data. For the security of your data, you ca
Passwords + Address Book Manager Nowadays, the average Internet users have at least a dozen different Internet accounts, each with different logins and passwords to remember. You practically need a database to store all this information. Passwords + Address Book Manager is designed to kee
Protectorion Universal Encryption Suite Protectorion Universal Encryption Suite protects your files, folders and passwords. The software prevents hackers and other unauthorized persons from reading and misusing confidential data on PCs as well as on cloud, network and flash drives. Access your e
MYOB Key MYOB Password Recovery Key recovers passwords for MYOB Data files (.PLS). This product supports all versions of MYOB. All passwords are recovered instantly. The software is easy to use - drag and drop the file to the program window to recover the password.
Supported Operating Systems:
Windows 2000 |
Comments on Microsoft Exchange 2000 Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources:
Comments not found
Windows Software - Free Windows Downloads, Apps, Games, Freeware, Skype, Media Player, Antivirus, Gimp, Live, Starter for Windows XP, Vista, 7, 8, 10