Description
Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information.
References (2)
Core 2
Core References
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/14225
Patch vendor-advisory
x_refsource_mskb
http://support.microsoft.com/default.aspx/kb/900930
Scores
EPSS
0.1339
EPSS Percentile
96.0%
Details
Status
published
Products (1)
microsoft/outlook_express
6.0 (3 CPE variants)
Published
Jul 12, 2005
Tracked Since
Feb 18, 2026