CVE-1999-1265

Medium

Published: 22/09/1998(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.63%

73th percentile - higher than 73% of all known CVEs

Summary

The SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character.

Risk Assessment

Attackers can cause service unavailability, potentially disrupting email communication within the organization.

Recommendation

It is recommended to upgrade to a newer version of SLmail that is not vulnerable to this issue and to monitor server logs for suspicious activity.

Original NVD description (English source)

SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character, such as (1) SEND, (2) VRFY, (3) EXPN, (4) MAIL FROM, (5) RCPT TO.