Vulnerability in Microsoft Exchange Server

CVE-1999-0993

Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.

Vulnerability class: Dirty Pipe (CVE-2022-0847)

EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.

Affected products

Microsoft Exchange_server — versions 5.0, 5.5
N/a — versions n/a

Weakness classification (CWE)

CWE-665 — Improper Initialization

Public proof-of-concept exploits

Live-Hack-CVE/CVE-1999-0993

References

cve@mitre.org (x_refsource_MISC)

Frequently asked questions

What is CVE-1999-0993?: CVE-1999-0993 is a vulnerability in Microsoft Exchange Server, classified under Improper Initialization. Published 1999-12-13.
Is CVE-1999-0993 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.