Exchange Server Software that is no longer supported by the vendor for security updates must not be installed on a system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-53399	EMG1-009 Exch2K3	SV-67615r1_rule	ECSC-1	High

Description
Exchange Server Software that is no longer supported by Microsoft for security updates is not evaluated or updated for vulnerabilities, leaving it open to potential attack. Organizations must transition to a supported Exchange Server Software to ensure continued support.

STIG	Date
Microsoft Exchange Server 2003	2014-08-19

Details

Check Text ( C-54667r2_chk )
Microsoft Exchange Server 2003 mainstream support ended 14 April 2009, and extended support ended 8 April 2014. If Microsoft Exchange Server 2003 is installed on a system, this is a finding.

Fix Text (F-58211r1_fix)
Upgrade Microsoft Exchange Server to a supported version.