Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability

Bugtraq ID:	11374
Class:	Boundary Condition Error
CVE:	CVE-2004-0840
Remote:	Yes
Local:	No
Published:	Oct 12 2004 12:00AM
Updated:	Jul 12 2009 07:06AM
Credit:	This vulnerability was announced by Microsoft.
Vulnerable:	Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition Microsoft Exchange Server 2003 SP1 Microsoft Exchange Server 2003 Microsoft Exchange Server 2000 SP3 Microsoft Exchange Server 2000 SP2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server Microsoft Exchange Server 2000 SP1 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server Microsoft Exchange Server 2000 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server Avaya S8100 Media Servers 0 + Microsoft Windows 2000 Server + Microsoft Windows NT Server 4.0 SP6a Avaya S3400 Message Application Server 0 + Microsoft Windows 2000 Server Avaya Modular Messaging (MSS) 2.0 Avaya Modular Messaging (MSS) 1.1 Avaya IP600 Media Servers Avaya DefinityOne Media Servers
Not Vulnerable:	Microsoft Exchange Server 2003 SP1

Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability

The Microsoft Windows 2003 SMTP Service and Exchange Routing Engine have been reported prone to a buffer overflow. This occurs during the processing responses to DNS lookups. Successful exploitation could allow for remote code execution in the context of the vulnerable service.

Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability

Solution:
Microsoft has released a bulletin that includes fixes to address this issue for supported versions of the operating system.

Note that the fix for Exchange Server 2000 Service Pack 3 requires that the Exchange 2000 Server Post-Service Pack 3 (SP3) Update Rollup be installed as a prerequisite. See Knowledge Base article 870540 in the References section for further details on this rollup.


Microsoft Windows Server 2003 Web Edition

• Microsoft Security Update for Windows Server 2003 (KB885881)
  http://www.microsoft.com/downloads/details.aspx?familyid=d7767455-1ca0 -49ea-8f71-76da5d451a07&displaylang=en

Microsoft Exchange Server 2003

• Microsoft Security Update for Exchange 2003 (KB885882)
  http://www.microsoft.com/downloads/details.aspx?familyid=313BEC77-0845 -46D4-BB43-06C792ADB2EA&displaylang=en

Microsoft Windows XP 64-bit Edition Version 2003 SP1

• Microsoft Security Update for Windows Server 2003 64-bit Edition and Windows XP 64-bit Edition, Version 2003
  http://www.microsoft.com/downloads/details.aspx?familyid=b53e890d-7d6a -4bb4-8e28-15d661014288&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 64-bit Edition and Windows XP 64-bit Edition, Version 2003
  http://www.microsoft.com/downloads/details.aspx?familyid=b53e890d-7d6a -4bb4-8e28-15d661014288&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition

• Microsoft Security Update for Windows Server 2003 (KB885881)
  http://www.microsoft.com/downloads/details.aspx?familyid=d7767455-1ca0 -49ea-8f71-76da5d451a07&displaylang=en

Microsoft Windows Server 2003 Standard Edition

• Microsoft Security Update for Windows Server 2003 (KB885881)
  http://www.microsoft.com/downloads/details.aspx?familyid=d7767455-1ca0 -49ea-8f71-76da5d451a07&displaylang=en

Microsoft Windows XP 64-bit Edition Version 2003

• Microsoft Security Update for Windows Server 2003 64-bit Edition and Windows XP 64-bit Edition, Version 2003
  http://www.microsoft.com/downloads/details.aspx?familyid=b53e890d-7d6a -4bb4-8e28-15d661014288&displaylang=en

Microsoft Exchange Server 2000 SP3

• Microsoft Security Update for Exchange 2000 (KB890066)
  http://www.microsoft.com/downloads/details.aspx?familyid=EDADF98A-0D26 -401B-BCB7-E199477A75C2&displaylang=en

Microsoft Exchange Server 2003 SP1

• Microsoft Security Update for Exchange 2003 (KB885882)
  http://www.microsoft.com/downloads/details.aspx?familyid=313BEC77-0845 -46D4-BB43-06C792ADB2EA&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Security Update for Windows Server 2003 (KB885881)
  http://www.microsoft.com/downloads/details.aspx?familyid=d7767455-1ca0 -49ea-8f71-76da5d451a07&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 64-bit Edition and Windows XP 64-bit Edition, Version 2003
  http://www.microsoft.com/downloads/details.aspx?familyid=b53e890d-7d6a -4bb4-8e28-15d661014288&displaylang=en

Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability

References:

• Knowledge Base Article 870540 (Microsoft)
  
• Microsoft Security Bulletin MS04-035 (Microsoft)