CVE-2003-0714

Exchange Server <5.5-2000 - DoS

Title source: llm

Description

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16820
exploitdb WORKING POC VERIFIED
by H D Moore · perldoswindows
https://www.exploit-db.com/exploits/113
metasploit WORKING POC GOOD
by hdm, aushack · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smtp/ms03_046_exchange2000_xexch50.rb

Scores

EPSS 0.6700
EPSS Percentile 98.6%

Details

CWE
CWE-400
Status published
Products (2)
microsoft/exchange_server 5.5 (5 CPE variants)
microsoft/exchange_server 2000 (4 CPE variants)
Published Nov 17, 2003
Tracked Since Feb 18, 2026