To support the exchange of mail with heterogeneous systems, Exchange messages use the attributes of SMTP mail messages that are specified by RFC's 821 and 822. There is a flaw in the way Exchange 2000 handles certain malformed RFC message attributes on received mail. Upon receiving a message containing such a malformation, the flaw causes the Store service to consume 100% of the available CPU in processing the message.
A security vulnerability results because it is possible for an attacker to seek to exploit this flaw and mount a denial of service attack. An attacker could attempt to levy an attack by connecting directly to the Exchange server and passing a raw, hand-crafted mail message with a specially malformed attribute. When the message was received and processed by the Store service, the CPU would spike to 100%. The effects of the attack would last as long as it took for the Exchange Store service to process the message. Neither restarting the service nor rebooting the server would remedy the denial of service.
Microsoft Exchange 2000 SP2
Like it? Share with your friends!
Other Windows Software of Developer «Microsoft»:
Microsoft Silverlight 4 Tools for Visual Studio 2010 Microsoft Silverlight 4 Tools for Visual Studio 2010 is an add-on for Visual Studio 2010 to provide tooling for Microsoft Silverlight 4 and RIA Services. It can be installed on top of either Visual Studio 2010 or Visual Web Developer 2010 Express. It exten
Rule COM Component The Rule COM component provides a scriptable (ActiveX) set of objects that can be used to manage a Microsoft Exchange 5.5 Information Store folder's rules using a CDO 1.2.1 Folder object. Microsoft Exchange 5.5 folder rules are stored in the Exchange Store
Exchange Server 2003 Help Update Exchange Server 2003 Help Update has been updated. It includes additional topics that were not included on the product CD. Also it will guide you through Exchange features, tasks, and administration procedures. Exchange Help augments Exchange Server 2003 o
Microsoft Exchange Server Information Store Viewer (MDBVU32) Use Information Store Viewer (also called MDBVu32) to view or set details about a users message storage files, which consist of the private information store, the personal folder file (.Pst), the public store and the offline folder file (.Ost). The Informa
System Update Readiness Tool for Windows 7 (64-bit) System Update Readiness Tool for Windows 7 (64-bit) is being offered because an inconsistency was found in the Windows servicing store which may prevent the successful installation of future updates, service packs, and software. This tool checks your compu
Xbox Theme for Outlook Web Access Xbox Theme for Outlook Web Access make up the optional files and custom Outlook Web Access theme. This version is the first release on CNET Download.com.What is new in this release:This version is the first release on CNET Download.com.Requirements:Windows
Microsoft LifeCam VX-5500 Driver The package provides the installation files for Microsoft LifeCam VX-5500 Driver version 18.104.22.168.In order to manually update your driver, follow the steps below (the next steps):1. Go to Device Manager (right click on My Computer, choose Manage and then
Enterprise Library May 2007 The patterns and practices, Enterprise Library is a library of application blocks designed to assist developers with common enterprise development challenges. Application blocks are a type of guidance, provided as source code that can be used as is, extend
Power Encrypt Actually file encryption is the most reliable way of data protection. Major functions of the program: search engine, virtual file system having standard views and functions of Windows explorer. Cryptographically stable protection. Instant Encryption panels
Password Unlocker Bundle Ultimate Forgot logon password for Windows and MS SQL Server? Forgot password to open your Office files and more? Password Unlocker Bundle Ultimate is the solution.
It lets you instantly recover/reset password for Windows, MS SQL Server, Access, Outlook, Outloo
SpotIE SpotIE is a Internet Explorer Password Recovery program to recover passwords to Web sites saved in Microsoft Internet Explorer, and AutoComplete strings. It is a comprehensive solution for recovering all types of Internet Explorer saved passwords. The soft
Defygo Defygo is your identity protection suite. A fancy way of saying it securely stores all of your usernames and passwords in one easy to use program. By using state-of-the-art encryption techniques and the latest developments in software technology we have de
Password Manager Password Manager is a useful utility for managing your passwords. Remember one password, and leave the others to the application. All the data is stored and encrypted in your own computer. It's easy to use and comes with such useful utilities as a secure f
Smash Ensure your privacy. Keep your files out of unwanted hands. Smash implements U.S. Government approved file encryption and file wiping standards, and it does it with speed and finesse. Smash can even encrypt the names of your files.Requirements:Windows 95/9
Silver Key Sending a file over the Internet is basically the same as publishing it. Anybody with an access to any of many intermediary servers also has the full access to any data passing through it. If the information is of any value, it should be secured. Although
The PC Detective Pro The PC Detective is a spy utility that monitors your PC or multiple PCs over a LAN logging all activity including Web sites visited, applications run, all keystrokes, chat conversations, instant messages, and regular screen captures all in complete stealth
Arusoft Password Generator Arusoft Password Generator is a program designed for generating strong passwords easily and quickly. Using Arusoft Password Generator, you can easily create extremely strong passwords any length. It is powerful, but very fast, small, and easy to use. Aruso
Supported Operating Systems:
Windows 2000 |
Comments on Microsoft Exchange 2000 Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources:
Comments not found
Windows Software - Free Windows Downloads, Apps, Games, Freeware, Skype, Media Player, Antivirus, Gimp, Live, Starter for Windows XP, Vista, 7, 8, 10