CVE-2003-0007

Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/6667
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-003
https://exchange.xforce.ibmcloud.com/vulnerabilities/11133

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:outlook:2002:::::::*
	cpe:2.3:a:microsoft:outlook:2002:sp1::::::
	cpe:2.3:a:microsoft:outlook:2002:sp2::::::

History

No history.

Information

Published : 2003-02-07 05:00

Updated : 2024-02-28 10:24

NVD link : CVE-2003-0007

Mitre link : CVE-2003-0007

CVE.ORG link : CVE-2003-0007

JSON object : View

Products Affected

microsoft

outlook

CWE

NVD-CWE-Other

{"id": "CVE-2003-0007", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2003-02-07T05:00:00.000", "references": [{"url": "http://www.securityfocus.com/bid/6667", "source": "cve@mitre.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-003", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11133", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka \"Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure.\""}, {"lang": "es", "value": "Microsoft Outllok no maneja adecuadamente las peticiones para cifrar mensajes con un certificados de Seguridad de Exchange Server V1, lo que hace que Outlook env\u00ede el mensaje en texto plano, tambi\u00e9n conocida como \"Fallo en como Outlook 2002 maneja certificados de seguridad de Exchange Server podr\u00eda llevar a desvelamiento de informaci\u00f3n."}], "lastModified": "2018-10-12T21:32:21.067", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2002:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3A4D9C5-A698-4523-8756-5D7EBAA47951"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2002:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0E20E02-43B2-499B-ADDD-B5B7003894D7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}