Microsoft Exchange and the built-in Microsoft SMTP server are vulnerable to a denial of service attack resulting from a certain sequence of malformed SMTP commands.
When the SMTP server encounters the following sequence of commands (after sending MAIL FROM and RCPT TO), it will crash, causing the session to hang or drop:
BDAT 4<crlf> b00mAUTH LOGIN<crlf>
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center