CVE-2002-1790: microsoft exchange_server
Vulnerability summary
CVE-2002-1790 is a medium (CVSS 5.0) vulnerability in microsoft exchange_server. EPSS estimates a 33.97% chance of exploitation in the next 30 days, higher than 98.3% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 28-06-2005PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
33.97%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 33.97% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
Microsoft IIS 4.0/5.0 - SMTP Service Encapsulated SMTP Address (MS99-027)
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft3 products
- exchange_serverEOL5.5 | 5.5:sp1 | 5.5:sp2
- internet_information_server4.0
- internet_information_services5.0
1 vendor · 3 products
References
3 links- online.securityfocus.com/archive/1/281914Mailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry