CVE-2002-1790

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 34.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-12-31 · updated 2026-06-16

Description

The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.

Affected products

Microsoft Exchange Server: 5.5, 5.5-sp1, 5.5-sp2
Microsoft Internet Information Server: 4.0
Microsoft IIS: 5.0

References

http://online.securityfocus.com/archive/1/281914
http://www.iss.net/security_center/static/9580.php
http://www.securityfocus.com/bid/5213
http://online.securityfocus.com/archive/1/281914
http://www.iss.net/security_center/static/9580.php
http://www.securityfocus.com/bid/5213

Get alerted when CVE-2002-1790 or the next vulnerability affects your stack