The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability."

The installed version of Microsoft Exchange / Windows SMTP Service is affected by at least one vulnerability :

  - Incorrect parsing of DNS Mail Exchanger (MX) resource     records could cause the Windows Simple Mail Transfer     Protocol (SMTP) component to stop responding until     the service is restarted. (CVE-2010-0024)

  - Improper allocation of memory for interpreting SMTP     command responses may allow an attacker to read random     email message fragments stored on the affected server.
    (CVE-2010-0025)

  - Predictable transaction IDs are used, which could allow     a man-in-the-middle attacker to spoof DNS responses.
    (CVE-2010-1689)

  - There is no verification that the transaction ID of a     response matches the transaction ID of a query, which     could allow a man-in-the-middle attacker to spoof DNS     responses. (CVE-2010-1690)

The installed version of Windows SMTP Service is affected by at least one vulnerability : 

  - Incorrect parsing of DNS Mail Exchanger (MX) resource records could cause the Windows Simple Mail Transfer Protocol (SMTP) component to stop responding until the service is restarted. (CVE-2010-0024)

  - Improper allocation of memory for interpreting SMTP command responses may allow an attacker to read random e-mail message fragments stored on the affected server. (CVE-2010-0025)

The installed version of Microsoft Exchange / Windows SMTP Service is affected by at least one vulnerability :

  - Incorrect parsing of DNS Mail Exchanger (MX) resource     records could cause the Windows Simple Mail Transfer     Protocol (SMTP) component to stop responding until     the service is restarted. (CVE-2010-0024)

  - Improper allocation of memory for interpreting SMTP     command responses may allow an attacker to read random     email message fragments stored on the affected server.
    (CVE-2010-0025)

ID	Name	Product	Family	Severity
108800	MS10-024: Microsoft Exchange Denial of Service (uncredentialed)	Nessus	Windows	medium
5510	MS10-024: Microsoft Exchange and Windows SMTP Service DoS (981832)	Nessus Network Monitor	SMTP Servers	medium
45517	MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832) (uncredentialed check)	Nessus	SMTP problems	medium
45511	MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832)	Nessus	Windows : Microsoft Bulletins	medium

Detections

Analytics

CVE-2010-0025

high

Tenable Plugins

medium

medium

medium

medium