16 September 2003

Email

Microsoft products, including Windows Server, Exchange Server and desktop operating systems, continue to be vulnerable to exploitation from malicious code.

We continue to have issues with email that relate to the vulnerabilities of Microsoft products, including Windows Server, Exchange Server and desktop operating systems, to exploitation from malicious code.

The latest episode, last Friday, involved over 111,000 spam email messages being relayed through Exchange servers on campus from some outside source, resulting in our Exchange Server being overwhelmed, and blacklisted by several anti-spam services. The issue appears to have been resolved but there is no understanding of what had happened or how it was fixed. The security on the server has been increased to such an extent that there continues to be problems sending legitimate email from some machines. The server is no longer blacklisted.