First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-1999-1043

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error).

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-007Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-007Patch, Vendor Advisory

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-104610.0Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via CVE-1999-10477.5When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access rest CVE-1999-104910.0ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 a CVE-1999-10505.0Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot do CVE-1999-10515.0Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts acce CVE-1999-10525.0Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the d CVE-1999-10537.5guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to exec CVE-1999-10557.5Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by CVE-1999-10587.5Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary com CVE-1999-10605.0Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary comman CVE-1999-106310.0CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.CVE-1999-106410.0Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary com