CVE-1999-1033

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=92647407427342&w=2
http://marc.info/?l=bugtraq&m=92663402004275&w=2
http://www.securityfocus.com/bid/252Exploit, Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=92647407427342&w=2
http://marc.info/?l=bugtraq&m=92663402004275&w=2
http://www.securityfocus.com/bid/252Exploit, Patch, Vendor Advisory

Timeline

Published: May 11, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-10355.0IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" CVE-1999-10421.2Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to lo CVE-1999-10435.0Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote atta CVE-1999-104610.0Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via CVE-1999-10477.5When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access rest CVE-1999-104910.0ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 a CVE-1999-10505.0Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot do CVE-1999-10515.0Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts acce CVE-1999-10525.0Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the d CVE-1999-10537.5guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to exec CVE-1999-10557.5Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by CVE-1999-10587.5Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary com