Resource exhaustion in Microsoft Exchange Server

CVE-2002-1876

Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.047 (90.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
  • cve@mitre.org (vdb-entry, Broken Link, x_refsource_XF)
  • cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)