Microsoft Exchange IMAP Command Processing Remote Denial of Service Vulnerability

Bugtraq ID:	23810
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-0221
Remote:	Yes
Local:	No
Published:	May 08 2007 12:00AM
Updated:	May 31 2019 10:00PM
Credit:	Joxean Koret, working with the iDefense Vulnerability Contributor Program is credited with the discovery of this vulnerability.
Vulnerable:	Microsoft Exchange Server 2000 SP3 Microsoft Exchange Server 2000 SP2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server Microsoft Exchange Server 2000 SP1 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server Microsoft Exchange Server 2000 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server 0
Not Vulnerable:

Microsoft Exchange IMAP Command Processing Remote Denial of Service Vulnerability

Microsoft Exchange is prone to a remote denial-of-service vulnerability because it fails to properly handle specially crafted IMAP commands.

Successfully exploiting this issue allows remote attackers to cause targeted Exchange servers' mail service to stop responding, thus denying further email service for legitimate users. To recover from the denial-of-service condition, administrators must restart the IIS Admin Service service.

Microsoft Exchange IMAP Command Processing Remote Denial of Service Vulnerability

Attackers exploit this issue by using readily available network utilities.

Microsoft Exchange IMAP Command Processing Remote Denial of Service Vulnerability

Solution:
The vendor has released an advisory along with updates to address this issue. Please see the referenced advisory for more information.


Microsoft Exchange Server 2000 SP1

• Microsoft Security Update for Exchange 2000 Server (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157

Microsoft Exchange Server 2000 SP3

• Microsoft Security Update for Exchange 2000 Server (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157

Microsoft Exchange Server 2000 SP2

• Microsoft Security Update for Exchange 2000 Server (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157

Microsoft Exchange Server 2000

• Microsoft Security Update for Exchange 2000 Server (KB931832)
  http://www.microsoft.com/downloads/details.aspx?familyid=21968843-4A81 -4F1D-8207-5B0A710E3157

Microsoft Exchange IMAP Command Processing Remote Denial of Service Vulnerability

References:

• Exchange Server Home Page (Microsoft)
  
• iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal (iDefense)
  
• ASA-2007-191 MS07-026 Vulnerabilities in Microsoft Exchange Could Allow Remote C (Avaya)
  
• Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability (iDefense)
  
• Microsoft Security Bulletin MS07-026 (Microsoft)