Microsoft Security Bulletin MS04-002 - Vulnerability in Exchange Serve

[marhoul]

http://www.microsoft.com/technet/security/bulletin/MS04-002.mspx

I have read this article and I have a reported instance of this occuring BUT we do not have SPS installed on the backend server, Exchange 2003 SP1 is installed (this security update was rolled up in it) and doing a cscript request on the HTTP authentication methods shows that no NTLM is set.

Any ideas?

Mark