GCVE - cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*

part: a version: 2003 update: -

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Exchange Server (`17dc5bb6-7963-5a93-8e97-6e9d34085c50`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1690`	vulnerable	2026-06-08 04:54:09.959336	Details available The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 does not verify that transaction IDs of responses match transaction IDs of queries, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025. Published: 2010-05-07T18:23:00.000Z Updated: 2024-09-16T23:51:51.763Z Open on db.gcve.eu Reference links http://www.coresecurity.com/content/CORE-2010-0424-windows-smtp-dns-query-id-bugs http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0058.html http://www.securityfocus.com/bid/39910 http://securitytracker.com/id?1023939	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1689`	vulnerable	2026-06-08 04:54:09.955081	Details available The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 uses predictable transaction IDs that are formed by incrementing a previous ID by 1, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025. Published: 2010-05-07T18:23:00.000Z Updated: 2024-09-16T21:03:32.390Z Open on db.gcve.eu Reference links http://www.coresecurity.com/content/CORE-2010-0424-windows-smtp-dns-query-id-bugs http://www.securityfocus.com/bid/39908 http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0058.html http://securitytracker.com/id?1023939	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0738`	vulnerable	2026-06-08 04:48:13.495626	Details available Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls. Published: 2005-03-13T05:00:00.000Z Updated: 2024-08-07T21:21:06.786Z Open on db.gcve.eu Reference links http://secunia.com/advisories/14543 http://support.microsoft.com/?kbid=891504	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0560`	vulnerable	2026-06-08 04:48:13.004632	Details available Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port. Published: 2005-04-13T04:00:00.000Z Updated: 2024-08-07T21:21:05.612Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4032 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-021 http://secunia.com/advisories/14920/ http://www.kb.cert.org/vuls/id/275193 http://www.osvdb.org/displayvuln.php?osvdb_id=15467	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0420`	vulnerable	2026-06-08 04:48:12.599308	Details available Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application. Published: 2005-02-15T05:00:00.000Z Updated: 2024-08-07T21:13:54.204Z Open on db.gcve.eu Reference links http://secunia.com/advisories/14144 http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html https://exchange.xforce.ibmcloud.com/vulnerabilities/19225 http://www.securityfocus.com/bid/12459 http://www.vupen.com/english/advisories/2005/0105	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0840`	vulnerable	2026-06-08 04:47:51.610237	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0574`	vulnerable	2026-06-08 04:47:50.402096	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0904`	vulnerable	2026-06-08 04:47:22.821650	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.