PUBLISHED DATE: February 29, 2000CVE-2000-0216:
Microsoft email clients in...

Description

Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.

Products

• Microsoft Exchange Server
• Microsoft Exchange Server
• Microsoft exchange_srv 2000
• Microsoft Exchange Server 2000
• Microsoft Exchange Server 2000 Service Pack 1
• Microsoft Exchange Server 2000 Service Pack 2
• Microsoft Exchange Server 2000 Service Pack 3
• Microsoft exchange_srv 2003
• Microsoft Exchange Server 2003
• Microsoft Exchange Server 2003 Service Pack 1
• Microsoft Exchange Server 2003 Service Pack 2
• Microsoft exchange_srv 2007
• Microsoft Exchange Server 2007
• Microsoft Exchange Server 2007 Service Pack 1
• Microsoft Exchange Server 2007 Service Pack 1 on x64
• Microsoft Exchange Server 2007 Service Pack 2 on x64
• Microsoft Exchange Server 2007 Service Pack 2 for x64 based systems
• Microsoft Exchange Server 2007 Service Pack 2 Update Rollup 1
• Microsoft Exchange Server 2007 Service Pack 2 Update Rollup 2
• Microsoft Exchange Server 2007 Service Pack 2 Update Rollup 3
• Microsoft Exchange Server 2007 Service Pack 2 Update Rollup 4
• Microsoft Exchange Server 2007 Service Pack 2 Update Rollup 5
• Microsoft Exchange Server 2007 Service Pack 3
• Microsoft Exchange Server 2010
• Microsoft Exchange Server 2010
• Microsoft Exchange Server 2010 on x64
• Microsoft Exchange Server 2010 for x64 based systems
• Microsoft Exchange Server 2010 Service Pack 1
• Microsoft Exchange Server 2010 Service Pack 2
• Microsoft Exchange Server 2010 Service Pack 3
• Microsoft Exchange Server 2010 Service Pack 3 Rollup20
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 10
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 11
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 12
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 13
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 14
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 15
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 16
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 17
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 18
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 19
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 1
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 20
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 21
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 22
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 23
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 24
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 25
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 26
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 27
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 28
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 29
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 2
• Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 31
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 3
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 4
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 5
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 6
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 7
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 8
• Microsoft Exchange Server 2010 Service Pack 3 Rollup 9
• Microsoft Exchange Server 2013
• Microsoft Exchange Server 2013
• Microsoft Exchange Server 2013 Cumulative Update 10
• Microsoft Exchange Server 2013 Cumulative Update 11
• Microsoft Exchange Server 2013 Cumulative Update 12
• Microsoft Exchange Server 2013 Cumulative Update 13
• Microsoft Exchange Server 2013 Cumulative Update 14
• Microsoft Exchange Server 2013 Cumulative Update 15
• Microsoft Exchange Server 2013 Cumulative Update 16
• Microsoft Exchange Server 2013 Cumulative Update 17
• Microsoft Exchange Server 2013 Cumulative Update 18
• Microsoft Exchange Server 2013 Cumulative Update 19
• Microsoft Exchange Server 2013 Cumulative Update 1
• Microsoft Exchange Server 2013 Cumulative Update 20
• Microsoft Exchange Server 2013 Cumulative Update 21
• Microsoft Exchange Server 2013 Cumulative Update 22
• Microsoft Exchange Server 2013 Cumulative Update 23
• Microsoft Exchange Server 2013 Cumulative Update 2
• Microsoft Exchange Server 2013 Cumulative Update 3
• Microsoft Exchange Server 2013 Cumulative Update 5
• Microsoft Exchange Server 2013 Cumulative Update 6
• Microsoft Exchange Server 2013 Cumulative Update 7
• Microsoft Exchange Server 2013 Cumulative Update 8
• Microsoft Exchange Server 2013 Cumulative Update 9
• Microsoft Exchange Server 2013 Service Pack 1
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2016 Cumulative Update 10
• Microsoft Exchange Server 2016 Cumulative Update 11
• Microsoft Exchange Server 2016 Cumulative Update 12
• Microsoft Exchange Server 2016 Cumulative Update 13
• Microsoft Exchange Server 2016 Cumulative Update 14
• Microsoft Exchange Server 2016 Cumulative Update 15
• Microsoft Exchange Server 2016 Cumulative Update 16
• Microsoft Exchange Server 2016 Cumulative Update 17
• Microsoft Exchange Server 2016 Cumulative Update 18
• Microsoft Exchange Server 2016 Cumulative Update 19
• Microsoft Exchange Server 2016 Cumulative Update 1
• Microsoft Exchange Server 2016 Cumulative Update 20
• Microsoft Exchange Server 2016 Cumulative Update 21
• Microsoft Exchange Server 2016 Cumulative Update 22
• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2016 Cumulative Update 2
• Microsoft Exchange Server 2016 Cumulative Update 3
• Microsoft Exchange Server 2016 Cumulative Update 4
• Microsoft Exchange Server 2016 Cumulative Update 5
• Microsoft Exchange Server 2016 Cumulative Update 6
• Microsoft Exchange Server 2016 Cumulative Update 7
• Microsoft Exchange Server 2016 Cumulative Update 8
• Microsoft Exchange Server 2016 Cumulative Update 9
• Microsoft Exchange Server 2019
• Microsoft Exchange Server 2019 Cumulative Update 10
• Microsoft Exchange Server 2019 Cumulative Update 11
• Microsoft Exchange Server 2019 Cumulative Update 12
• Microsoft Exchange Server 2019 Cumulative Update 13
• Microsoft Exchange Server 2019 Cumulative Update 14
• Microsoft Exchange Server 2019 Cumulative Update 1
• Microsoft Exchange Server 2019 Cumulative Update 2
• Microsoft Exchange Server 2019 Cumulative Update 3
• Microsoft Exchange Server 2019 Cumulative Update 4
• Microsoft Exchange Server 2019 Cumulative Update 5
• Microsoft Exchange Server 2019 Cumulative Update 6
• Microsoft Exchange Server 2019 Cumulative Update 7
• Microsoft Exchange Server 2019 Cumulative Update 8
• Microsoft Exchange Server 2019 Cumulative Update 9
• Microsoft exchange_srv 4.0
• Microsoft Exchange Server 4.0
• Microsoft Exchange Server 4.0 Service Pack 1
• Microsoft Exchange Server 4.0 Service Pack 2
• Microsoft Exchange Server 4.0 Service Pack 3
• Microsoft Exchange Server 4.0 Service Pack 4
• Microsoft Exchange Server 4.0 Service Pack 5
• Microsoft exchange_srv 5.0
• Microsoft Exchange Server 5.0
• Microsoft Exchange Server 5.0 Service Pack 1
• Microsoft Exchange Server 5.0 Service Pack 2
• Microsoft exchange_srv 5.5
• Microsoft Exchange Server 5.5
• Microsoft Exchange Server 5.5 Service Pack 1
• Microsoft Exchange Server 5.5 Service Pack 2
• Microsoft Exchange Server 5.5 Service Pack 3
• Microsoft Exchange Server 5.5 Service Pack 4
• Microsoft Outlook
• Microsoft Outlook
• Microsoft Outlook for Android
• Microsoft Outlook for iPhone OS
• Microsoft Outlook 2000
• Microsoft Outlook 2000 sp2
• Microsoft Outlook 2000 sp3
• Microsoft Outlook 2000 Service Pack 4
• Microsoft Outlook 2000 sr1
• Microsoft Outlook 2002
• Microsoft Outlook 2002 sp1
• Microsoft Outlook 2002 sp2
• Microsoft Outlook 2002 Service Pack 3
• Microsoft Outlook 2003
• Microsoft Outlook 2003 sp1
• Microsoft Outlook 2003 Service Pack 3
• Microsoft Outlook 2007
• Microsoft Outlook 2007 Service Pack 1
• Microsoft Outlook 2007 Service Pack 2
• Microsoft Outlook 2007 sp3
• Microsoft Outlook 2010 sp1 x64 (64bit)
• Microsoft Outlook 2010 sp1 x64 (64bit)
• Microsoft Outlook 2010 x86 (32bit)
• Microsoft Outlook 2010 Service Pack 2
• Microsoft Outlook 2010 sp2 x64 (64bit)
• Microsoft Outlook 2010 sp2 x64 (64bit)
• Microsoft Outlook 2010 sp2 x86 (32bit)
• Microsoft Outlook 2011 for Mac Os X
• Microsoft Outlook 2013
• Microsoft Outlook 2013 RT Edition
• Microsoft Outlook 2013 - - Edition - Edition for -
• Microsoft Outlook 2013 x64 (64-bit)
• Microsoft Outlook 2013 x86 (32-bit)
• Microsoft Outlook 2013 Service Pack 1
• Microsoft Outlook 2013 Service Pack 1 - Edition
• Microsoft Outlook 2013 Service Pack 1 RT Edition
• Microsoft Outlook 2016
• Microsoft Outlook 2016 on x64
• Microsoft Outlook 2016 on x86
• Microsoft Outlook 2016 for Android
• Microsoft Outlook 2016 Mac OS X
• Microsoft Outlook 2016 for macOS
• Microsoft Outlook 3.12.0 for iPhone OS
• Microsoft Outlook 3.13.0 iPhone OS
• Microsoft Outlook 3.14.0 for iPhone OS
• Microsoft Outlook 3.15.0 for iPhone OS
• Microsoft Outlook 3.16.0 for iPhone OS
• Microsoft Outlook 3.17.0 for iPhone OS
• Microsoft Outlook 3.17.1 for Iphone Os
• Microsoft Outlook 3.18.0 for iPhone OS
• Microsoft Outlook 3.20.0 for iPhone OS
• Microsoft Outlook 3.21.0 for iPhone OS
• Microsoft Outlook 3.22.0 for iPhone OS
• Microsoft Outlook 3.22.1 for iPhone OS
• Microsoft Outlook 3.23.0 for iPhone OS
• Microsoft Outlook 3.24.0 for iPhone OS
• Microsoft Outlook 3.24.1 for iPhone OS
• Microsoft Outlook 3.25.0 for iPhone OS
• Microsoft Outlook 3.26.0 for iPhone OS
• Microsoft Outlook 3.27.0 for iPhone OS
• Microsoft Outlook 3.27.1 for iPhone OS
• Microsoft Outlook 3.28.0 for iPhone OS
• Microsoft Outlook 3.29.0 for iPhone OS
• Microsoft Outlook 3.30.0 for iPhone OS
• Microsoft Outlook 3.31.0 for iPhone OS
• Microsoft Outlook 3.32.0 for iPhone OS
• Microsoft Outlook 3.33.0 for iPhone OS
• Microsoft Outlook 97
• Microsoft Outlook 98
• Microsoft Outlook XP
• Microsoft Windows Messaging
• Microsoft windows_messaging

Questions to Ask Vendors

1. Can you confirm whether your systems are affected by CVE-2000-0216, and if so, what steps are you currently taking to mitigate this vulnerability?
2. What is your estimated timeline for fully resolving CVE-2000-0216 in your products or services, and how will you communicate updates on this issue to us as your customer?

Recommended Actions

• Check out the advisory links provided below.

References

• https://nvd.nist.gov/vuln/detail/CVE-2000-0216