CVE-1999-0993
HighExploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
Modifications to Access Control Lists (ACLs) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
Risk Assessment
This may lead to unauthorized access to resources as changes in permissions are not enforced immediately.
Recommendation
It is recommended to regularly refresh the directory store cache after making changes to ACLs.
Other vulnerabilities in Microsoft Exchange 5.5
See all- CVE-1999-0682Medium
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
- CVE-2023-35368High
A vulnerability in Microsoft Exchange allows for remote code execution, potentially leading to system takeover. An attacker can exploit this flaw to execute arbitrary code on the Exchange server.
Original NVD description (English source)
Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.