CVE-2005-2226

Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-07-12

Last modified

2024-09-17

Affected products

• Outlook Express (Microsoft)

References

• http://support.microsoft.com/default.aspx/kb/900930
• http://www.securityfocus.com/bid/14225