Vulnerabilities > Microsoft > Exchange Server > Critical

DATE CVE VULNERABILITY TITLE RISK
2004-11-03 CVE-2004-0840 Improper Input Validation vulnerability in Microsoft Exchange Server, Windows Server 2003 and Windows XP
The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
network
low complexity
microsoft CWE-20
critical
 10.0
10
1998-12-01 CVE-1999-0385 Classic Buffer Overflow vulnerability in Microsoft Exchange Server 5.5
The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.
network
low complexity
microsoft CWE-120
critical
 10.0
10