Microsoft Exchange 2000 Multiple MSRPC Denial Of Service Vulnerabilities

Microsoft Exchange makes usage of the MSRPC, the Microsoft Remote Procedure Call framework. Several potential issues have been reported in MSRPC, as used in conjunction with Microsoft Exchange.
Malformed MSRPC calls may result in either the Exchange server or the underlying operating system crashing. A denial of service condition may result, requiring a restart in order to regain normal functionality.

Information

Bugtraq ID: 5412
Class: Unknown
CVE: CVE-2002-1873

Remote: Yes
Local: No
Published: Aug 06 2002 12:00AM
Updated: May 31 2019 10:00PM
Credit: Reported by Dave Aitel <[email protected]>.
Vulnerable: Microsoft Exchange Server 2000 SP2
Microsoft Exchange Server 2000 SP1
Microsoft Exchange Server 2000

Not Vulnerable:

Exploit

Reportedly, these issues may be exploited with the publically available Spike tool, available at the following URL:
http://www.immunitysec.com/spike.html

References:

Exchange Server Home Page (Microsoft)
Microsoft Technet Security (Microsoft)

Source: www.securityfocus.com

Exploit Collector

Search Exploit