• info
• discussion
• exploit
• solution
• references

Microsoft Exchange Server AUTH / XAUTH / AUTHINFO DoS Vulnerabilities

Solution:
Microsoft has released patches to address these issue, available at:

Exchange 5.0 Internet Mail Service SMTP):
ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.0/Post-SP2-IMS/

Exchange 5.0 Information Store (NNTP):
ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.0/Post-SP2-STORE/

Exchange 5.5:
These patches are available as part of Service Pack 1 and later, available at:
ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.5/