medium5.0Public exploit code
CVE-2002-1790
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed me…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 4.0/5.0 - SMTP Service Encapsulated SMTP Address (MS99-027)2002-07-12 · remote · windows · Verified
Impact
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Exchange Server | Version 5.5 |
| Microsoft | Internet Information Server | Version 4.0 |
| Microsoft | Internet Information Services | Version 5.0 |