Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-0560 — Out-of-bounds Write in Microsoft Exchange Server

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
7.5HIGHNVD
EPSS
72.9%
top 1.22%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Exchange Server
Timeline
PublishedMay 2
Latest updateMay 1

Description

Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDmicrosoft/exchange_server2000, 2003+1

Patches

Patch: secunia.com ↗Patch: www.kb.cert.org ↗Patch: www.us-cert.gov ↗

🔴Vulnerability Details

2
GHSA
GHSA-hmrq-pv99-355p: Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink↗2022-05-01
▶
CVEList
CVE-2005-0560: Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink↗2005-04-13
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Exchange Server - Remote Code Execution (MS05-021)↗2005-04-19
▶
CVE-2005-0560 — Out-of-bounds Write in Microsoft | cvebase