| Vulnerability Name: | CVE-1999-1043 (CCN-1223) | ||||||||
| Assigned: | 1998-07-24 | ||||||||
| Published: | 1998-07-24 | ||||||||
| Updated: | 2020-04-02 | ||||||||
| Summary: | Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error). | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
| ||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: CCN Type: CIAC Information Bulletin I-080 Microsoft Exchange Denial of Service Attacks Source: MITRE Type: CNA CVE-1999-0945 Source: MITRE Type: CNA CVE-1999-1043 Source: CCN Type: Internet Security Systems Security Alert #04 Denial of Service attacks against Microsoft Exchange 5.0 to 5.5 Source: CCN Type: Microsoft Corporation Web site Microsoft Servers - Exchange Server Home Source: CCN Type: Microsoft Security Bulletin MS98-007 Potential SMTP and NNTP Denial-of-Service Vulnerabilities in Microsoft Exchange Server Source: CCN Type: OSVDB ID: 10246 Microsoft Exchange Server Malformed NNTP AUTHINFO DoS Source: CCN Type: OSVDB ID: 11268 Microsoft Exchange Internet Mail Service AUTH/AUTHINFO Command DoS Source: CCN Type: OSVDB ID: 8211 Microsoft Exchange Server Malformed SMTP Command DoS Source: CCN Type: BID-924 Microsoft Exchange Server AUTH / XAUTH / AUTHINFO DoS Vulnerabilities Source: MS Type: Patch, Vendor Advisory MS98-007 Source: XF Type: UNKNOWN exchange-dos(1223) Source: CCN Type: Microsoft Knowledge Base Article 169174 XFOR: IMS Halts if RFC821 Address Over 1k in Size is Received Source: CCN Type: Microsoft Knowledge Base Article 188341 XFOR: AUTH and EHLO Commands Cause Internet Mail Service to Stop Source: CCN Type: Microsoft Knowledge Base Article 188369 XADM: AUTHINFO Command Causes Information Store Problems | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||