Vulnerability in N/a

CVE-2005-0560

Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to th…

EPSS: 0.729 (98.8th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

oval:org.mitre.oval:def:4032 (signature, x_refsource_OVAL, vdb-entry)
MS05-021 (x_refsource_MS, vendor-advisory)
14920 (x_refsource_SECUNIA, third-party-advisory)
VU#275193 (x_refsource_CERT-VN, third-party-advisory)
15467 (x_refsource_OSVDB, vdb-entry)
20050412 Microsoft Exchange Remote Compromise (x_refsource_ISS, third-party-advisory)
TA05-102A (x_refsource_CERT, third-party-advisory)
20050419 MS05-021 Microsoft Exchange X-LINK2STATE Heap Overflow PoC (mailing-list, x_refsource_BUGTRAQ)