CVE-2002-1790: Medium severity microsoft exchange server vulnerability

Published Dec 31, 2002

Updated

The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.

Affected Software

5 affected components

Microsoft Exchange Server=5.5-sp1

Microsoft Internet Information Services=5.0

Microsoft Exchange Server=5.5-sp2

Microsoft Internet Information Server=4.0

Microsoft Exchange Server=5.5

Remediation

Patch Available

http://www.securityfocus.com/bid/5213

Event History

Dec 31, 2002

CVE Published

05:00 AM

Jun 28, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1790?

CVE-2002-1790 is classified as a high severity vulnerability due to its potential to allow remote attackers to send spam or spoofed messages.

How do I fix CVE-2002-1790?

To mitigate CVE-2002-1790, ensure that your Microsoft IIS and Exchange Server versions are updated to a secure version or apply available patches from Microsoft.

What systems are affected by CVE-2002-1790?

CVE-2002-1790 affects Microsoft Internet Information Services 4.0 and 5.0, as well as Microsoft Exchange Server 5.5.

What type of vulnerability is CVE-2002-1790?

CVE-2002-1790 is an anti-relaying vulnerability in the SMTP service that allows unauthorized message sending.

Can CVE-2002-1790 be exploited remotely?

Yes, CVE-2002-1790 can be exploited remotely, enabling attackers to bypass anti-relaying rules.