Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026
CVE-2002-1790
CVE-2002-1790
Description
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*
- (no CPE)range: 4.0, 5.0
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/5213nvdExploitPatchThird Party AdvisoryVDB Entry
- online.securityfocus.com/archive/1/281914nvdThird Party AdvisoryVDB Entry
- www.iss.net/security_center/static/9580.phpnvdBroken Link
News mentions
0No linked articles in our index yet.