PT-2002-2914 · Microsoft · Outlook Express

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2202

Positive Technologies (AI Summary)

CVSS v2.0

3.8

Low

Base vector

AV:L/AC:H/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Outlook Express version 6.0

Description: The issue allows local users to read other users' email because messages are not deleted from dbx files when the Deleted items folder is emptied.

Recommendations: For Outlook Express version 6.0, manually delete the dbx files after emptying the Deleted items folder to prevent other users from reading the emails.

Exploit

Fix

Related Identifiers

CVE-2002-2202

Affected Products

Outlook Express

References · 3

• 🔥 http://iss.net/security_center/static/10500.php · Exploit
• 🔥 http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0210&L=ntbugtraq&F=P&S=&P=5732 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2202 · Security Note