CVE Catalog

CVE-1999-0419

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.40%

69th percentile - higher than 69% of all known CVEs

Summary

The Microsoft SMTP service, when attempting to send a message to a server and receiving a 4xx error code, quickly and repeatedly tries to redeliver the message, leading to a denial of service.

Risk Assessment

An attacker could exploit this vulnerability to overload the SMTP service, resulting in unavailability for users.

Recommendation

It is recommended to monitor and limit the number of redelivery attempts in case of 4xx errors.

Original NVD description (English source)

When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS