CVE-1999-0945

Published: Mar 12, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands.

Affected (2)

Products: Microsoft: Exchange Server

Microsoft

1 product

Exchange Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Exchange Server	Version 5.0
Microsoft Exchange Server	Version 5.5

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (8)

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ169174

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/i-080.shtml

Source: cve@mitre.org

PatchVendor Advisory

http://xforce.iss.net/alerts/advise4.php

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/1223

Source: cve@mitre.org

VDB Entry

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ169174

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ciac.org/ciac/bulletins/i-080.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://xforce.iss.net/alerts/advise4.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/1223

Source: af854a3a-2127-422b-91ae-364da2661108

VDB Entry

Timeline

No history available yet.