Microsoft Outlook Express SMTP Over TLS Information Disclosure Vulnerability

Bugtraq ID:	5274
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 19 2002 12:00AM
Updated:	Jul 19 2002 12:00AM
Credit:	Published by Greg Owen <Greg_Owen@vibren.com>.
Vulnerable:	Microsoft Outlook Express for MacOS 5.0.3 - Apple Mac OS 7 7.0 - Apple Mac OS 8 8.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0 Microsoft Outlook Express for MacOS 5.0.2 - Apple Mac OS 7 7.0 - Apple Mac OS 8 8.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0 Microsoft Outlook Express for MacOS 5.0.1 - Apple Mac OS 7 7.0 - Apple Mac OS 8 8.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0 Microsoft Outlook Express for MacOS 5.0 - Apple Mac OS 8 8.6 - Apple Mac OS 8 8.6 - Apple Mac OS 8 8.5 - Apple Mac OS 8 8.5 - Apple Mac OS 8 8.1 - Apple Mac OS 8 8.1 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 Microsoft Outlook Express for MacOS 4.5 - Apple Mac OS 8 8.0 - Apple Mac OS 8 8.0 Microsoft Outlook Express 4.72.3612 Microsoft Outlook Express 4.72.3120 Microsoft Outlook Express 4.72.2106 Microsoft Outlook Express 4.27.3110 Microsoft Outlook Express 6.0 + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Itanium SP2 + Microsoft Windows Server 2003 Itanium SP2 + Microsoft Windows Server 2003 Itanium SP1 + Microsoft Windows Server 2003 Itanium SP1 + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Standard x64 Edition + Microsoft Windows Server 2003 Standard x64 Edition + Microsoft Windows Server 2003 Web Edition + Microsoft Windows Server 2003 Web Edition + Microsoft Windows Server 2003 Web Edition + Microsoft Windows Server 2003 x64 SP2 + Microsoft Windows Server 2003 x64 SP2 + Microsoft Windows XP 64-bit Edition + Microsoft Windows XP 64-bit Edition + Microsoft Windows XP Home + Microsoft Windows XP Home + Microsoft Windows XP Home + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Media Center Edition + Microsoft Windows XP Media Center Edition + Microsoft Windows XP Media Center Edition + Microsoft Windows XP Professional + Microsoft Windows XP Professional + Microsoft Windows XP Professional + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Tablet PC Edition SP2 + Microsoft Windows XP Tablet PC Edition SP2 + Microsoft Windows XP Tablet PC Edition + Microsoft Windows XP Tablet PC Edition Microsoft Outlook Express 5.5 + Microsoft Internet Explorer 5.0.1 for Windows NT 4.0 + Microsoft Internet Explorer 5.0.1 for Windows NT 4.0 + Microsoft Internet Explorer 5.0.1 for Windows 98 + Microsoft Internet Explorer 5.0.1 for Windows 98 + Microsoft Internet Explorer 5.0.1 for Windows 95 + Microsoft Internet Explorer 5.0.1 for Windows 95 + Microsoft Internet Explorer 5.0.1 for Windows 2000 + Microsoft Internet Explorer 5.0.1 for Windows 2000 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.5 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows 98SE - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Microsoft Outlook Express 5.0 Microsoft Outlook Express 4.0

Not Vulnerable: