CVE

Id
4448  
CVE No.
CVE-2002-0054  
Status
Entry  
Description
SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
21542 4448 CVE-2002-0054 MS:MS02-011  View
21543 4448 CVE-2002-0054 URL:http://www.microsoft.com/technet/security/bulletin/ms02-011.asp  View
21544 4448 CVE-2002-0054 BID:4205  View
21545 4448 CVE-2002-0054 URL:http://www.securityfocus.com/bid/4205  View
21546 4448 CVE-2002-0054 BUGTRAQ:20020301 IIS SMTP component allows mail relaying via Null Session  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63723 JVNDB-2002-000050 Microsoft Windows の SMTP サービスにおける認証を回避される脆弱性 Microsoft Windows および Exchange Server において、SMTP サービスの NTLM 認証レイヤからユーザの認証通知時のチェックが不適切なため、サーバへの認証のみでSMTPサービスの利用が可能となる脆弱性が存在します。 CVE-2002-0054 4448 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000050.html  View