PT-2003-1306 · Microsoft · Exchange Server+1

Publicado 2003-02-07 · Atualizado 2018-10-12 · CVE-2003-0007

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Outlook version 2002

Description The issue arises from how Microsoft Outlook 2002 handles requests to encrypt email messages with V1 Exchange Server Security certificates. This improper handling causes Outlook to send the email in plaintext, potentially leading to information disclosure.

Recommendations For Microsoft Outlook 2002, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2003-0007

Produtos afetados

Exchange Server

Outlook

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/11133 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0007 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-003 · Aviso do Fabricante
• http://securityfocus.com/bid/6667 · Nota