National Vulnerability Database (CVE-1999-0682)

National Cyber-Alert System Vulnerability Summary: CVE-1999-0682
Orirignal release date: 1999-08-06 Source: US-CERT/NIST ### Overview Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled. ### Impact CVSS Severity: 3.3 (Low) Range: remote Authentication: input bound="1",env Impact Type: avail ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: BID 567 Hyperlink: http://securityfocus.com/bid/567 External Source: Microsoft Name: MS99-027 Hyperlink: http://www.microsoft.com/TechNet/security/bulletin/ms99-027.asp External Source: Microsoft Name: MS99-027 Hyperlink: http://www.microsoft.com/technet/security/bulletin/fq99-027.asp External Source: ISS X-Force Name: exchange-relay(3107) Hyperlink: http://xforce.iss.net/static/3107.php ### Vulnerable Software and Vendor Exchange (Microsoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0682