CVE-2005-0738: Medium severity Microsoft Exchange Server vulnerability

Published Mar 13, 2005

Updated

Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls.

Affected Software

2 affected components

Microsoft Exchange Server=2003-sp1

Microsoft Exchange Server=2003

Remediation

Patch Available

http://support.microsoft.com/?kbid=891504

Event History

Mar 13, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0738?

CVE-2005-0738 has a severity rating of medium due to its potential to cause denial of service.

How do I fix CVE-2005-0738?

To fix CVE-2005-0738, apply the latest patches or updates provided by Microsoft for Exchange Server 2003 SP1.

What causes CVE-2005-0738?

CVE-2005-0738 is caused by stack consumption when deleting or moving folders containing deeply nested subfolders in Microsoft Exchange Server.

Which versions are affected by CVE-2005-0738?

CVE-2005-0738 affects Microsoft Exchange Server 2003 SP1 and also the base version of Exchange Server 2003.

What effect does CVE-2005-0738 have on the system?

CVE-2005-0738 can cause the Microsoft Exchange Information Store service (Store.exe) to hang, leading to a denial of service.