CVE Catalog
CVE-1999-0819
MediumExploitation Probability (EPSS)
Very high risk14.82%
96th percentile - higher than 96% of all known CVEs
Summary
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
Risk Assessment
Leaving the VRFY command enabled may allow attackers to gather information about existing email accounts, increasing the risk of account enumeration attacks.
Recommendation
Administrators should ensure that the VRFY command is effectively disabled in the NTMail configuration.
Original NVD description (English source)
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.