SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
CVSS v2.0 Score
7.5
/ 10.0
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Information
- Published
- 8 mars 2002
- Updated
- 16 avr. 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
microsoft exchange server
Versions : 5.5
microsoft windows 2000
Weaknesses (CWE)
CWE-294
References (6)
- http://marc.info/?l=bugtraq&m=101501580409373&w=2Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/4205PatchThird Party AdvisoryVDB Entry
- http://marc.info/?l=bugtraq&m=101501580409373&w=2Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/4205PatchThird Party AdvisoryVDB Entry
Similar CVEs
Other vulnerabilities of type CWE-294
Loading…
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.