| Vulnerability Name: | CVE-2002-0054 (CCN-8304) | ||||||||
| Assigned: | 2002-02-27 | ||||||||
| Published: | 2002-02-27 | ||||||||
| Updated: | 2026-06-16 | ||||||||
| Summary: | SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials. | ||||||||
| CVSS v40 Severity: | |||||||||
| CVSS v3.x Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-294 | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: MITRE Type: CNA CVE-2002-0054 Source: af854a3a-2127-422b-91ae-364da2661108 Type: UNKNOWN af854a3a-2127-422b-91ae-364da2661108 Source: cve@mitre.org Type: UNKNOWN cve@mitre.org Source: CCN Type: BindView RAZOR Security Advisory, March 1, 2002 IIS SMTP component allows mail relaying via Null Session Source: CCN Type: US-CERT VU#874115 Microsoft Windows SMTP Service fails to properly handle responses from the NTLM authentication layer Source: CCN Type: Microsoft Security Bulletin MS02-011 Authentication Flaw Could Allow Unauthorized Users To Authenticate To SMTP Service Source: CCN Type: OSVDB ID: 10247 Microsoft Windows SMTP Service NTLM Null Session Mail Relay Source: CCN Type: OSVDB ID: 5390 Microsoft Exchange NTLM Null Session Mail Relay Source: af854a3a-2127-422b-91ae-364da2661108 Type: UNKNOWN af854a3a-2127-422b-91ae-364da2661108 Source: CCN Type: BID-4205 Microsoft Windows SMTP Service Authorization Bypass Vulnerability Source: cve@mitre.org Type: UNKNOWN cve@mitre.org Source: af854a3a-2127-422b-91ae-364da2661108 Type: UNKNOWN af854a3a-2127-422b-91ae-364da2661108 Source: cve@mitre.org Type: UNKNOWN cve@mitre.org Source: XF Type: UNKNOWN ms-smtp-unauth-priv(8304) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||