PT-2003-1306 · Microsoft · Exchange Server+1

Published 2003-02-07 · Updated 2018-10-12 · CVE-2003-0007

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Outlook version 2002

Description The issue arises from how Microsoft Outlook 2002 handles requests to encrypt email messages with V1 Exchange Server Security certificates. This improper handling causes Outlook to send the email in plaintext, potentially leading to information disclosure.

Recommendations For Microsoft Outlook 2002, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2003-0007

Affected Products

Exchange Server

Outlook

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-0007 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-003 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11133 · Note
• http://securityfocus.com/bid/6667 · Note