CVE-2002-1790

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.

Affected (5)

Products: Microsoft: Exchange Server, Internet Information Server, Internet Information Services

Microsoft

3 products

Exchange Server

Internet Information Server

Internet Information Services

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Exchange Server	Version 5.5
Microsoft Exchange Server	Version 5.5 sp1
Microsoft Exchange Server	Version 5.5 sp2
Microsoft Internet Information Server	Version 4.0
Microsoft Internet Information Services	Version 5.0