CVE-2003-0714

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 77.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-11-17 · updated 2026-06-16
Weakness: CWE-400

Description

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.

Affected products

Microsoft Exchange Server: 5.5, 5.5-sp1, 5.5-sp2, 5.5-sp3, 5.5-sp4, 2000 (+3)

References

http://marc.info/?l=bugtraq&m=106682909006586&w=2
http://www.cert.org/advisories/CA-2003-27.html
http://www.kb.cert.org/vuls/id/422156
http://www.securityfocus.com/bid/8838
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-046
http://marc.info/?l=bugtraq&m=106682909006586&w=2
http://www.cert.org/advisories/CA-2003-27.html
http://www.kb.cert.org/vuls/id/422156
http://www.securityfocus.com/bid/8838
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-046

Get alerted when CVE-2003-0714 or the next vulnerability affects your stack