CVE-2003-0714

Exchange Server <5.5-2000 - DoS

Title source: llm

Description

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.

Exploits (3)

metasploit WORKING POC GOOD
by hdm, aushack · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smtp/ms03_046_exchange2000_xexch50.rb
exploitdb WORKING POC VERIFIED
by H D Moore · perldoswindows
https://www.exploit-db.com/exploits/113
exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16820

Scores

EPSS 0.6700
EPSS Percentile 98.5%

Classification

CWE
CWE-400
Status draft

Affected Products (9)

microsoft/exchange_server
microsoft/exchange_server
microsoft/exchange_server
microsoft/exchange_server
microsoft/exchange_server
microsoft/exchange_server
microsoft/exchange_server
microsoft/exchange_server
microsoft/exchange_server

Timeline

Published Nov 17, 2003
Tracked Since Feb 18, 2026