DNS: Microsoft Exchange Crafted MX Record

This signature detects attempts to exploit a known vulnerability in the way that Microsoft Windows Simple Mail Transfer Protocol (SMTP) component handles specially crafted DNS Mail Exchanger (MX) resource records. Because authentication is not required, an attacker can exploit this flaw by sending a specially crafted network message to a computer running the SMTP service. A successful attack can result in a denial-of-service condition.

Extended Description

The Microsoft Windows Simple Mail Transfer Protocol (SMTP) Server is prone to a denial-of-service vulnerability. Successful exploits will cause the affected SMTP server to stop responding, denying service to legitimate users.

Affected Products

Avaya messaging_application_server,Microsoft windows_server_2008_for_itanium-based_systems

References

BugTraq: 39308

CVE: CVE-2010-0024

URL: http://www.microsoft.com/technet/security/Bulletin/MS10-024.aspx

Short Name

DNS:CRAFTED-MX

Severity

Minor

Recommended

False

Recommended Action

Drop

DNS: Microsoft Exchange Crafted MX Record

Extended Description

Affected Products

References

Found a potential security threat?