Signature Detail

APP: Microsoft Exchange EMSMDB32 Denial of Service

This signature detects attempts to exploit a known vulnerability against Microsoft Exchange. A successful attack can result in a denial-of-service condition. Note: This signature covers the issue on Exchange's default port for this process. Under certain circumstances, this port could be changed. It is advised that if you use Exchange EMSMDB on a non-standard port that you adjust the service for this signature appropriately.

Extended Description

Microsoft Exchange Server is prone to a remote denial-of-service vulnerability. A successful exploit allows a remote attacker to cause the application to stop responding, denying service to legitimate users.

Affected Products

• Avaya messaging_application_server MM 1.1
• Avaya messaging_application_server MM 2.0
• Avaya messaging_application_server MM 3.0
• Avaya messaging_application_server MM 3.1
• Avaya messaging_application_server
• Microsoft exchange_server_2000 SP1
• Microsoft exchange_server_2000 SP2
• Microsoft exchange_server_2000 SP3
• Microsoft exchange_server_2000
• Microsoft exchange_server_2003 SP1
• Microsoft exchange_server_2003 SP2
• Microsoft exchange_server_2003
• Microsoft exchange_server_mapi_client 1.2.1

References

• BugTraq: 33136
• CVE: CVE-2009-0099