Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-1790
smtp
microsoft
internet information services
iis
remote attackers
anti-relaying rules
spam
spoofed messages
cve-2002-1790
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
89.0%
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.
Affected configurations
Node
microsoftexchange_serverMatch5.5-
ORmicrosoftexchange_serverMatch5.5sp1
ORmicrosoftexchange_serverMatch5.5sp2
ORmicrosoftinternet_information_serverMatch4.0
ORmicrosoftinternet_information_servicesMatch5.0
Related
nvd
nvd
CVE-2002-1790
2002-12-31 05:00:00
CVE-1999-0682
1999-08-06 04:00:00
cvelist
cvelist
CVE-2002-1790
2022-10-03 16:23:46
CVE-1999-0682
2000-01-04 05:00:00
cve
cve
CVE-1999-0682
2000-01-04 05:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
89.0%
Related for CVE-2002-1790