[virusinfo] Denial of service in Microsoft Exchange Server 2003 - 03/10/05

  • From: "Mike" <mikebike@xxxxxxxxx>
  • To: virusinfo@xxxxxxxxxxxxx
  • Date: Fri, 11 Mar 2005 10:11:32 -0800

From; Panda Oxygen3:

"Thinking is more interesting than knowing, 
                    but less interesting than looking."
      Johann Wolfgang von Goethe (1749-1832); German poet dramatist.

       - Denial of service in Microsoft Exchange Server 2003 -
     Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com)

Madrid, March 10, 2005 - Microsoft has reported that moving or deleting
folders that contain subfolders in Microsoft Outlook could cause a Denial of
Service (DoS) in the Exchange Server 2003 it is connected to.

The problem arises because Exchange 2003 carries out a large number of calls
when trying to move or delete folders containing multiple subfolders,
exceeding the maximum stack size and overflowing the buffer.

A Microsoft Outlook user connected to the server could, accidentally or
deliberately, cause a general error and block the Exchange Server 2003 when
carrying out the actions described above.

In the article about this flaw Microsoft announces that the solution will be
included in the next Service Pack for Exchange Server 2003. For clients that
need an immediate solution, a patch has been released, which can be accessed
through Microsoft's technical support services.

NOTE: The address above may not show up on your screen as a single line.
This would prevent you from using the link to access the web page. If this
happens, just use the 'cut' and 'paste' options to join the pieces of the
URL.

------------------------------------------------------------

The 5 viruses most frequently detected by Panda ActiveScan, Panda Software's
free online scanner: 1) Mhtredir.gen; 2) Netsky.P; 3) Downloader.GK; 4)
Sdbot.ftp; 5) Shinwow.E. 

------------------------------------------------------------
To contact with Panda Software, please visit:
http://www.pandasoftware.com/about/contact/
------------------------------------------------------------

*********** MIKE"S REPLY SEPARATOR  ***********
Mike ~ It is a good day if I learned something new.
Editor MikesWhatsNews see a sample on my web page
http://www3.telus.net/mikebike
<mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=subscribe>
http://www3.telus.net/mikebike/worm_removal.htm
See my Anti-Virus pages  http://virusinfo.hackfix.org/index
<virusinfo-request@xxxxxxxxxxxxx?Subject=subscribe>
A Technical Support Alliance  and OWTA Charter Member 



Other related posts:

  • » [virusinfo] Denial of service in Microsoft Exchange Server 2003 - 03/10/05