Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability

Bugtraq ID:	23809
Class:	Design Error
CVE:	CVE-2007-0213
Remote:	Yes
Local:	No
Published:	May 08 2007 12:00AM
Updated:	May 31 2019 10:00PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Microsoft Exchange Server 2007 0 Microsoft Exchange Server 2003 SP2 Microsoft Exchange Server 2003 SP1 Microsoft Exchange Server 2003 Microsoft Exchange Server 2000 SP3 Microsoft Exchange Server 2000 SP2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server Microsoft Exchange Server 2000 SP1 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server Microsoft Exchange Server 2000 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server 0
Not Vulnerable:

Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability

Microsoft Exchange is prone to a remote code-execution vulnerability because the application fails to properly decode specially crafted email messages.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the vulnerable application, which may lead to a complete compromise of affected computers.

Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory along with fixes to address this issue. Please see the referenced advisory for more information.


Microsoft Exchange Server 2007 0

• Microsoft Update Rollup 2 for Exchange Server 2007 (KB935490)
  http://www.microsoft.com/downloads/details.aspx?familyid=356874EF-C9C0 -4842-99F0-E449E9940358

Microsoft Exchange Server 2000 SP3

• Microsoft Security Update for Exchange 2000 Server (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157

Microsoft Exchange Server 2000 SP2

• Microsoft Security Update for Exchange 2000 Server (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157

Microsoft Exchange Server 2003 SP1

• Microsoft Security Update for Exchange Server 2003 SP1 (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=5E7939BE-73D1 -461C-8C79-EDDB0F1459FC

Microsoft Exchange Server 2000 SP1

• Microsoft Security Update for Exchange 2000 Server (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157

Microsoft Exchange Server 2003 SP2

• Microsoft Security Update for Exchange Server 2003 SP2 (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=1ABF93DA-D765 -4876-96B5-ACB2D2A48F8F

Microsoft Exchange Server 2000

• Microsoft Security Update for Exchange 2000 Server (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157

Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability

References:

• Exchange Server Home Page (Microsoft)
  
• ASA-2007-191 MS07-026 Vulnerabilities in Microsoft Exchange Could Allow Remote C (Avaya)
  
• Microsoft Security Bulletin MS07-026 (Microsoft)
  
• Vulnerability Note VU#343145 (US-CERT)