CVE-1999-1500

Medium

Published: 01/10/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.35%

68th percentile - higher than 68% of all known CVEs

Summary

The Internet Anywhere POP3 Mail Server version 2.3.1 is vulnerable to a denial of service attack that can cause the server to crash. Attackers can exploit LIST, TOP, or UIDL commands using letters as arguments to trigger this issue.

Risk Assessment

This vulnerability may lead to service unavailability, affecting the organization's operational continuity and potentially resulting in data loss.

Recommendation

It is recommended to upgrade the server to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.