CVE-1999-1043

Medium

Published: 31/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

13.33%

96th percentile - higher than 96% of all known CVEs

Summary

Microsoft Exchange Server 5.5 and 5.0 does not properly handle malformed NNTP and SMTP data, which can lead to application errors.

Risk Assessment

Remote attackers can cause a denial of service, affecting system availability for users.

Recommendation

It is recommended to update to the latest version of Exchange Server and monitor logs for potential attack attempts.

Original NVD description (English source)

Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error).