CVE-2000-0524: Microsoft Exchange Server

Medium severity, CVSS 5.0. EPSS: 14.6% chance of exploitation in the next 30 days.

Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From.

Affected products

• Microsoft Exchange Server: version 4.0 only; version 5.0 only
• Microsoft Outlook: version 97 only

Published 2000-06-05. Last modified 2026-06-16.