medium5.0Public exploit code
CVE-1999-0819
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DeskPro 1.1 - Multiple SQL Injections2003-10-20 · webapps · php · Verified
Impact
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows Nt | Version 4.0 |