CVE-1999-0819: Medium severity Microsoft Windows NT vulnerability
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NTMailfrom your environment.Uninstall NTMail or disable/remove its SMTP component if it is not required, and isolate the host until a vendor-provided fix is available.
- Compensating control
Restrict network access to the NTMail SMTP service (TCP/25) using firewall rules or ACLs so only trusted hosts/networks can connect; block or filter SMTP VRFY traffic at perimeter devices or upstream mail gateways.
- Operational
Verify whether the VRFY command is actually disabled by testing the NTMail SMTP service from an external host and monitor SMTP logs for VRFY attempts. If VRFY remains enabled, stop or disable the NTMail SMTP service until an official fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0819?
CVE-1999-0819 is classified as a medium severity vulnerability.
How do I fix CVE-1999-0819?
To fix CVE-1999-0819, ensure that the VRFY command is disabled in your NTMail configuration.
What systems are affected by CVE-1999-0819?
CVE-1999-0819 affects Microsoft Windows NT 4.0 and Microsoft Windows 2000.
What is the risk associated with CVE-1999-0819?
The risk associated with CVE-1999-0819 is that unauthorized users can verify email addresses on the server.
Is CVE-1999-0819 still relevant today?
CVE-1999-0819 may still be relevant for legacy systems that have not been updated or replaced.