CVE-1999-0385 — The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands

Published Sep 29, 1999

No CVSS score

EPSS 18.21%

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.

No remediation recorded yet.

18.21% 0.18210

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.18210

2022–2026

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	18.21% (0.18210)	97.13th	v5 (v2026.06.15)
Jun 15, 2026	17.88% (0.17883)	96.79th	v5 (v2026.06.15)
Mar 30, 2025	9.00% (0.08997)	91.82th	v4 (v2025.03.14)
Mar 29, 2025	7.96% (0.07961)	86.52th	v4 (v2025.03.14)
Mar 17, 2025	9.77% (0.09771)	92.38th	v4 (v2025.03.14)
Dec 17, 2024	27.25% (0.27248)	96.79th	v3 (v2023.03.01)
Feb 8, 2024	0.98% (0.00978)	82.94th	v3 (v2023.03.01)
Mar 7, 2023	0.46% (0.00456)	71.35th	v3 (v2023.03.01)
Mar 6, 2023	13.53% (0.13525)	95.77th	v2 (v2022.01.01)
Apr 1, 2022	13.53% (0.13525)	95.40th	v2 (v2022.01.01)
Feb 4, 2022	13.53% (0.13525)	90.66th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-009		vendor-advisoryx_refsource_MS

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 29, 1999

Updated Aug 1, 2024

Reserved Jun 7, 1999

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a