Lucene search

[email protected]CVE-2000-0216

HistoryMar 22, 2000 - 5:00 a.m.

CVE-2000-0216

2000-03-2205:00:00

[email protected]

web.nvd.nist.gov

outlook

exchange

windows messaging

attacks

cve-2000-0216

flooding

microsoft

read receipt

delivery receipt.

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.8%

JSON

Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.

Affected configurations

NVD

Node

microsoftexchange_server

microsoftoutlook

microsoftwindows_messaging

CPENameOperatorVersion
microsoft:exchange_servermicrosoft exchange servereq*
microsoft:outlookmicrosoft outlookeq*
microsoft:windows_messagingmicrosoft windows messagingeq*

CPE	Name	Operator	Version
microsoft:exchange_server	microsoft exchange server	eq	*
microsoft:outlook	microsoft outlook	eq	*
microsoft:windows_messaging	microsoft windows messaging	eq	*

References

archives.neohapsis.com/archives/ntbugtraq/2000-q1/0176.html

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.8%

JSON

Related for CVE-2000-0216

nvd1 cvelist1