VDB
CVE-2002-0054
CVE-2002-0054
PUBLISHED
CVSS 7.5 HIGH
SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
EPSS 12.54% · 94.1th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
12.54%
94.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | exchange_server | 5.5, 5.5, 5.5 |
| microsoft | windows_2000 | |
| n/a | n/a | n/a |
Timeline
- Mar 8, 2002 CVE Published
- Feb 4, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
- Jan 29, 2024 EPSS Score
References
- 20020301 IIS SMTP component allows mail relaying via Null Session mailing-list
- MS02-011 vendor-advisory
- 4205 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2002-0054 advisory