Lucene search
HistoryMar 08, 2002 - 5:00 a.m.
CVE-2002-0054
cve-2002-0054
windows 2000 vulnerability
exchange server 5.5 vulnerability
null session
smtp vulnerability
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.1%
SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:exchange_server | microsoft exchange server | eq | 5.5 |
| microsoft:windows_2000 | microsoft windows 2000 | eq | - |
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.1%
Related for CVE-2002-0054