Summary
generated automatically from NVD dataMicrosoft Exchange Server 2003 SP1 has a stack consumption flaw in how it handles folder operations. When a user deletes or moves a folder containing deeply nested subfolders, the Microsoft Exchange Information Store service (Store.exe) makes a large number of recursive calls and hangs, causing a denial of service. The issue is classified under CWE-400 and carries a CVSS v2.0 score of 5.0 (MEDIUM), with a network attack vector and impact limited to availability.
NVD description
Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls.
EPSS · FIRST.org
4.5%probability of exploitation in the next 30 days
Higher than 91% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-29, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 2 mai 2005
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (4)
- http://secunia.com/advisories/14543Vendor Advisory
- http://support.microsoft.com/?kbid=891504PatchVendor Advisory
- http://secunia.com/advisories/14543Vendor Advisory
- http://support.microsoft.com/?kbid=891504PatchVendor Advisory
Similar CVEs
Other vulnerabilities of type CWE-400
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.