7.5

CVE-2002-0054

SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Exchange Server Version 5.5 Update -
Microsoft ≫ Exchange Server Version 5.5 Update sp1
Microsoft ≫ Exchange Server Version 5.5 Update sp2
Microsoft ≫ Exchange Server Version 5.5 Update sp3
Microsoft ≫ Exchange Server Version 5.5 Update sp4
Microsoft ≫ Windows 2000 Version -
Microsoft ≫ Windows 2000 Version - Update sp1
Microsoft ≫ Windows 2000 Version - Update sp2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 22.44% 0.974
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-294 Authentication Bypass by Capture-replay

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

http://marc.info/?l=bugtraq&m=101501580409373&w=2
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/4205
Patch
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-011
Patch
Vendor Advisory