hi all ,
can anyone tell me what exactly is Exchange XEXCH50 Buffer Overflow ???
Is there POC code to demonstrate the same ?

Regards
Shadow

It's a heap overflow, wich makes it much harder to write a working exploit, due to the dynamic stack.

There's a POC (just to check for the vulnerability) at:

http://metasploit.com/tools/ms03-046.pl

H.D Moore is also supposed to release Framework 2.0 in the next few days, and hopefully, this framework will include a working version of the exchange exploit, as is suggested here:

http://metasploit.com/tools/msfweb.jpg

Check the metasploit projects in the next few days...(metasploit.com).

Core Impact also has a working version of this exploit.

yes core impact version 3.3 has it and it works very nice

Please share it ch0pper.. That would be nice

And *highly* illegal....Also, Core Impact has your license pre-compiled into the application...

ch0pper did u try it on core impact and is it work