CVE-1999-0993 — Improper Initialization in Microsoft Exchange Server

CWE-665 — Improper Initialization3 documents3 sources
Severity
7.5HIGHNVD
EPSS
8.7%
top 7.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Exchange Server
Timeline
PublishedDec 13
Latest updateApr 30

Description

Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

â–¶NVDmicrosoft/exchange_server5.0, 5.5+1

🔴Vulnerability Details

2
GHSA
GHSA-r287-63xg-jpw7: Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5↗2022-04-30
â–¶
CVEList
CVE-1999-0993: Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5↗2000-02-04
â–¶
CVE-1999-0993 — Improper Initialization in Microsoft | cvebase