ID CVE-2007-0221
Summary Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 09-04-2020 - 13:30)
Impact:
Exploitability:
CWE CWE-190
CAPEC
  • Forced Integer Overflow
    This attack forces an integer variable to go out of range. The integer variable is often used as an offset such as size of memory allocation or similarly. The attacker would typically control the value of such variable and try to get it out of range. For instance the integer in question is incremented past the maximum possible value, it may wrap to become a very small, or negative number, therefore providing a very incorrect value which can lead to unexpected behavior. At worst the attacker can execute arbitrary code.
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
oval via4
accepted 2008-05-05T04:00:16.603-04:00
class vulnerability
contributors
  • name Robert L. Hollis
    organization ThreatGuard, Inc.
  • name Clifford Farrugia
    organization GFI Software
definition_extensions
comment Microsoft Exchange Server 2000 Service Pack 3 is installed
oval oval:org.mitre.oval:def:1858
description Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."
family windows
id oval:org.mitre.oval:def:2054
status accepted
submitted 2007-05-09T10:04:48
title IMAP Literal Processing Vulnerability
version 7
refmap via4
bid 23810
cert TA07-128A
hp
  • HPSBST02214
  • SSRT071422
idefense 20070508 Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability
osvdb 34392
sectrack 1018015
secunia 25183
vupen ADV-2007-1711
xf exchange-imap-command-dos(33890)
Last major update 09-04-2020 - 13:30
Published 08-05-2007 - 23:19
Last modified 09-04-2020 - 13:30
Back to Top