Exchange Malformed MIME Header Handling DoS

Medium Nessus Plugin ID 10558


The remote SMTP server has a denial of service vulnerability.


The remote Exchange server seems to be vulnerable to a flaw that lets malformed MIME headers crash it.

*** Nessus did not actually test for these flaws - it just relied
*** on the banner to identify them. Therefore, this warning may be
*** a false positive - especially since the banner DOES NOT CHANGE
*** if the patch has been applied.


Microsoft has released a set of patches for Exchange 5.0 and 5.5.

See Also

Plugin Details

Severity: Medium

ID: 10558

File Name: exchange_dos.nasl

Version: $Revision: 1.27 $

Type: remote

Published: 2000/11/27

Modified: 2017/08/30

Dependencies: 10249, 10263

Risk Information

Risk Factor: Medium


Base Score: 6.4

Temporal Score: 5.6

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 2000/10/31

Reference Information

CVE: CVE-2000-1006

BID: 1869

OSVDB: 457

MSFT: MS00-082

MSKB: 275714, 834130