CVE-2002-1790: The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to by...

Security readout for executives and security teams

This old IIS SMTP flaw could let an outside sender bypass anti-relay rules and use an affected server to send spam or spoofed mail. The sources name Microsoft IIS 4.0 and 5.0 SMTP service, but provide no CVSS score, patch details, or active exploitation evidence. Exposure is likely limited to organizations still running legacy IIS 4.0 or 5.0 SMTP service, especially if reachable from untrusted networks. Modern environments are unlikely to be affected unless old systems remain in production. Treat as a legacy-technology exposure review. Priority is highest if old IIS SMTP servers are internet-facing or still handling mail, because abuse could damage sender reputation and support phishing or spam operations. Mitigation focus: Identify any IIS 4.0 or 5.0 SMTP service instances.; Check Microsoft or vendor guidance for official remediation.; Disable or isolate legacy SMTP service where business allows..

Prepared

Jun 29, 2026, 19:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.