An Exchange Server related security bulletin was released yesterday. Here are some details; please go and get the patches that apply to your Exchange version! Issued: May 08, 2007 Impact of V...
Updated Jul 01, 2019
Version 2.0
Blog Post
1 MIN READ
MS07-026: Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (931832)
We also meet some issue after applying hotfix 931832:
- messages stay in queue on our Exchange 2003 MTA servers (cluster) (problem with conversion from X400 to SMTP?)
- some messages or attachments are unopenable
- encoding issue with mail from applications (accentuated characters, attachment without extension)
- global 'Send As' permission removed for some service account like Blackberry (fixed like explained on Microsoft article)
Architecture:
- half part of our servers are on Exchange 2003 SP2 (mixed mode) (clustered or member server), the remaining on Exchange 5.5 SP4 (member server)
- SMTP in/out organization passed through Sendmail (Red Hat), connected to Exchange 2003 connector server (in place of the Exchange 5.5 one to avoid maximum of X400-SMTP conversion)
We will contact our Microsoft support about hotfix 934450, hope this will help a little.
- messages stay in queue on our Exchange 2003 MTA servers (cluster) (problem with conversion from X400 to SMTP?)
- some messages or attachments are unopenable
- encoding issue with mail from applications (accentuated characters, attachment without extension)
- global 'Send As' permission removed for some service account like Blackberry (fixed like explained on Microsoft article)
Architecture:
- half part of our servers are on Exchange 2003 SP2 (mixed mode) (clustered or member server), the remaining on Exchange 5.5 SP4 (member server)
- SMTP in/out organization passed through Sendmail (Red Hat), connected to Exchange 2003 connector server (in place of the Exchange 5.5 one to avoid maximum of X400-SMTP conversion)
We will contact our Microsoft support about hotfix 934450, hope this will help a little.