Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Mail-Max SMTP server can be hijacked remotely

CVE-1999-0404 · published 27 years ago
Summary

The Mail-Max email server for Windows can be tricked into running unwanted commands from outside the network. This could let an attacker take control of the server or access sensitive data. Apply the vendor’s security update and limit the server’s exposure to the internet.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
smartmax_software mailmax All versions
cpe:2.3:a:smartmax_software:mailmax:*:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
10% chance of attack within 30 days
Timeline
Published14 Feb 1999
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-1999-0404 · NVD
Track software like this
Free during beta