2001019

	SMTP encapsulated Exchange relay
advICE :Intrusions : 2001019

FAQ

Oh my gosh, I'm being HACKED!!!

How do I report the hacker to my ISP?

I'm seeing lots of attacks, is this normal?

Summary
Spam attempt
Details
An encapsulated email address of the form <IMCEASMTP-user+40destination+2Ecom@relay.com> was seen. Some versions of Microsoft Exchange fail to check for these types of addresses, so they can be used by spammers to send unauthorized email.

more information

Microsoft: Encapsulated SMTP address vulnerability
NTBugtraq Advisory
CVE-1999-0682 MS Exchange 5.5 allows attacker to relay encapsulated email addresses
Q237927 Messages Sent to Encapsulated SMTP Address Are Rerouted Even Though Rerouting Is Disabled
BugtraqID: 567 NT Exchange Server Encapsulated SMTP Address Vulnerability
CIAC: J-056
http://home.ntware.com/bugs/ms_exchange__9.html
http://www.microsoft.com/TechNet/exchange/relay.asp
MS Bulletin: MS99-027

parametric information

recipient The email recipient's name.

 
Version appeared: 1.9

SMTP encapsulated Exchange relay