CVE-2000-0216
MediumExploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
Risk Assessment
An attacker could exploit this vulnerability to overwhelm the mail system, leading to communication disruptions and potential losses for the organization.
Recommendation
It is recommended to restrict access to receipt functions and monitor email traffic for unusual response patterns.
Original NVD description (English source)
Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.