CVE-1999-0682
MediumExploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
Risk Assessment
An attacker can exploit this vulnerability to send unauthorized emails, potentially leading to server blacklisting or loss of organizational reputation.
Recommendation
It is recommended to upgrade to a newer version of Microsoft Exchange and configure appropriate security measures to minimize the risk of relaying.
Other vulnerabilities in Microsoft Exchange 5.5
See all- CVE-1999-0993High
Modifications to Access Control Lists (ACLs) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
- CVE-2023-35368High
A vulnerability in Microsoft Exchange allows for remote code execution, potentially leading to system takeover. An attacker can exploit this flaw to execute arbitrary code on the Exchange server.
Original NVD description (English source)
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.