CVE-2002-0054: High severity Microsoft Exchange Server vulnerability
SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0054?
CVE-2002-0054 has a severity rating of medium as it allows remote attackers to perform mail relaying.
How do I fix CVE-2002-0054?
To fix CVE-2002-0054, apply the appropriate security updates and patches provided by Microsoft for your affected Exchange Server or Windows version.
Which systems are affected by CVE-2002-0054?
CVE-2002-0054 affects Microsoft Exchange Server 5.5 and Microsoft Windows 2000.
What vulnerability does CVE-2002-0054 exploit?
CVE-2002-0054 exploits improper handling of NTLM authentication responses, allowing unauthorized mail relaying.
Can CVE-2002-0054 be exploited without authentication?
Yes, CVE-2002-0054 can be exploited using null session credentials, allowing attackers to authenticate without valid credentials.