Vulnerability Details : CVE-2003-0714

Public exploit exists!
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.
Published 2003-11-17 05:00:00
Updated 2020-04-09 13:49:24
Source MITRE
View at NVD,   CVE.org
Vulnerability category: OverflowDenial of service

Threat overview for CVE-2003-0714

Top countries where our scanners detected CVE-2003-0714
Top open port discovered on systems with this issue 110
IPs affected by CVE-2003-0714 231
Threat actors abusing to this issue? Yes
Find out if you* are affected by CVE-2003-0714!
*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2003-0714

Probability of exploitation activity in the next 30 days: 9.16%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 95 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2003-0714

  • MS03-046 Exchange 2000 XEXCH50 Heap Overflow
    Disclosure Date: 2003-10-15
    First seen: 2020-04-26
    exploit/windows/smtp/ms03_046_exchange2000_xexch50
    This is an exploit for the Exchange 2000 heap overflow. Due to the nature of the vulnerability, this exploit is not very reliable. This module has been tested against Exchange 2000 SP0 and SP3 running a Windows 2000 system patched to SP4. It normally takes

CVSS scores for CVE-2003-0714

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source
7.5
 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
 NIST

CWE ids for CVE-2003-0714

  • The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
    Assigned by: nvd@nist.gov (Primary)

References for CVE-2003-0714

Products affected by CVE-2003-0714

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close