CVE-1999-0993: High severity Microsoft Exchange Server vulnerability
Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
Refresh the directory store cache in Microsoft Exchange Server 5.5 after modifying Access Control Lists so the ACL changes take effect.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0993?
CVE-1999-0993 is classified as a moderate severity vulnerability.
How do I fix CVE-1999-0993?
To fix CVE-1999-0993, ensure that the directory store cache is refreshed after modifying ACLs.
Which versions of Microsoft Exchange are affected by CVE-1999-0993?
CVE-1999-0993 affects Microsoft Exchange Server versions 5.0 and 5.5.
What is the impact of CVE-1999-0993?
The impact of CVE-1999-0993 is that changes to access control lists may not take effect immediately without a cache refresh.
Can CVE-1999-0993 be exploited remotely?
CVE-1999-0993 does not involve a remote exploitation vector but rather an issue with local ACL modifications.