Interestingly, Exchange 2003 SP1 installed on Windows 2000 is not affected. The NNTP vulnerability on the other hand affects both Exchange 2000 and Exchange 2003, regardless of the underlying operating system.
Microsoft rates these vulnerabilities as critical seeing that these might allow execution of remote code and advises immediate installation of patches.
SMTP Vulnerability
http://www.microsoft.com/technet/security/bulletin/MS04-035.mspx
Download page:
http://www.microsoft.com/security/bulletins/200410_exchange.mspx
NNTP Vulnerability
http://www.microsoft.com/technet/security/bulletin/ms04-036.mspx
Windows 2000 Download link:
http://www.microsoft.com/downloads/details.aspx?familyid=54A86560-4A0C-4E2F-A137-D8EE905A674A&displaylang=en
Windows 2003 Download link:
http://www.microsoft.com/downloads/details.aspx?familyid=DCB1CB73-A426-40D8-BD14-B458C7915815&displaylang=en
About Amit Zinman
Currently working as Project Manager and Systems Consultant, heading and consulting on Exchange and NT/Windows 2000 based migrations and deployments for large companies such as Checkpoint, Comverse, Smarteam, Nice, Aladdin and leading Israeli Banks, Also involved in writing scripts and custom solutions for clients based on ADSI, CDO and Visual Basic and teaching Windows 2000 and Exchange 2000 in MSCE colleges and lecturing in Microsoft User Groups.
Receive all the latest articles by email!
Get all articles delivered directly to your mailbox as and when they are released on MSExchange.org! Choose between receiving instant updates with the Real-Time Article Update, or a monthly summary with the Monthly Article Update. Sign up to the MSExchange.org Monthly Newsletter, written by Exchange Expert Henrik Walther, containing news, the hottest tips, Exchange links of the month and much more. Subscribe today and don't miss a thing!
