CVE-2002-0055
Estado: ModificadaMedia (5)—
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 35%
- Percentil entre todas las CVEs puntuadas: 98
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-669
Referencias
- http://marc.info/?l=bugtraq&m=101558498401274&w=2
- http://www.iss.net/security_center/static/8307.php
- http://www.securityfocus.com/bid/4204
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-012
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A30
- http://marc.info/?l=bugtraq&m=101558498401274&w=2
- http://www.iss.net/security_center/static/8307.php
- http://www.securityfocus.com/bid/4204
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-012
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A30
JSON original (NVD)
Mostrar
{
"id": "CVE-2002-0055",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2002-03-08T05:00:00.000",
"references": [
{
"url": "http://marc.info/?l=bugtraq&m=101558498401274&w=2",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.iss.net/security_center/static/8307.php",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/4204",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-012",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A30",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=101558498401274&w=2",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.iss.net/security_center/static/8307.php",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/4204",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-012",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A30",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-669"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request."
},
{
"lang": "es",
"value": "El servicio SMTP en Windows 2000/XP Professional y Exchange 2000 permite a atacantes remotos provocar denegación de servico mediante un comando con una petición transferencia de datos malformada."
}
],
"lastModified": "2026-06-16T21:56:40.453",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF429469-1B63-4BF3-A59F-F8180226BB6D"
},
{
"criteria": "cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34300FD4-EC3B-4206-B6C0-1345F17EC5EA"
},
{
"criteria": "cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47132D0D-7691-40A3-A4BF-37D2ACE580C3"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "685F1981-EA61-4A00-89F8-A748A88962F8"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_2000:-:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A23A90DA-6E38-4479-926A-BD29F438F602"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_2000:-:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF99A17F-9469-4937-A23B-FD5C8B37087B"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:professional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D003AE4-9788-46EB-9D0E-2B20F11BAC64"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}