CVE-2002-0054

SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=bugtraq&m=101501580409373&w=2	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/4205	Patch Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-011	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:exchange_server:5.5:-::::::
	cpe:2.3:a:microsoft:exchange_server:5.5:sp1::::::
	cpe:2.3:a:microsoft:exchange_server:5.5:sp2::::::
	cpe:2.3:a:microsoft:exchange_server:5.5:sp3::::::
	cpe:2.3:a:microsoft:exchange_server:5.5:sp4::::::

Configuration 2 (hide)

OR	cpe:2.3:o:microsoft:windows_2000:-:::::::*
	cpe:2.3:o:microsoft:windows_2000:-:sp1::::::
	cpe:2.3:o:microsoft:windows_2000:-:sp2::::::

History

No history.

Information

Published : 2002-03-08 05:00

Updated : 2023-12-10 10:17

NVD link : CVE-2002-0054

Mitre link : CVE-2002-0054

CVE.ORG link : CVE-2002-0054

JSON object : View

Products Affected

microsoft

windows_2000
exchange_server

CWE

CWE-294

Authentication Bypass by Capture-replay

{"id": "CVE-2002-0054", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-03-08T05:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=101501580409373&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/4205", "tags": ["Patch", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-011", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-294"}]}], "descriptions": [{"lang": "en", "value": "SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials."}, {"lang": "es", "value": "El servicio SMTP enMicrosoft Windows 2000 y Internet Mail Connector (IMC) en Exchange Server 5.5no maneja adecuadamente respuestas a autenticaci\u00f3n NTLM, lo que permite a atacantes remotos hacer reenv\u00edo de correo mediante el servidor."}], "lastModified": "2020-04-09T13:46:18.370", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4F9C143-4734-4E5D-9281-F51513C5CAAF"}, {"criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD3E2F18-A369-4767-ACEF-38DB40EEC6D4"}, {"criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC01670D-4550-4034-86A5-7879B6334241"}, {"criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B80A57A1-7B9F-4C07-ADAA-DBC4687F1EFC"}, {"criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3983529-F4E3-4883-97AF-5BFC87AC3E86"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "685F1981-EA61-4A00-89F8-A748A88962F8"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:-:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A23A90DA-6E38-4479-926A-BD29F438F602"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:-:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF99A17F-9469-4937-A23B-FD5C8B37087B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}