VULNERABILITY INTELLIGENCE

CVE-1999-0385

CVSS score10 HIGH
EPSS probability18.21%
CISA KEVNot currently listed
Published1998-12-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.

Weakness classification

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references