← Database

CVE-2002-1790

MEDIUM CVSS: 5.0 Published: 2002-12-31 Modified: 2026-06-16

Description

The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.

Affected Platforms

Microsoft Internet Information ServicesMicrosoft Internet Information ServerMicrosoft Exchange Server

Weakness Type

NVD-CWE-noinfo

References