CVE

Id
3892  
CVE No.
CVE-2001-1088  
Status
Entry  
Description
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
17857 3892 CVE-2001-1088 BUGTRAQ:20010605 SECURITY.NNOV: Outlook Express address book spoofing  View
17858 3892 CVE-2001-1088 URL:http://www.securityfocus.com/archive/1/188752  View
17859 3892 CVE-2001-1088 CONFIRM:http://support.microsoft.com/default.aspx?scid=kb;EN-US;q234241  View
17860 3892 CVE-2001-1088 XF:outlook-address-book-spoofing(6655)  View
17861 3892 CVE-2001-1088 URL:http://xforce.iss.net/static/6655.php  View
17862 3892 CVE-2001-1088 BID:2823  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64107 JVNDB-2001-000081 Microsoft Outlook Express の複数の機能におけるアドレス帳改ざんの脆弱性 Microsoft Outlook Express において、返信機能、または返信する際にアドレス帳へ自動的に登録される機能を利用された場合に、アドレス帳が改ざんされる脆弱性が存在します。 CVE-2001-1088 3892 7.5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000081.html  View