Lucene search
HistoryOct 13, 2000 - 4:00 a.m.
CVE-2000-0319
sendmail
vulnerability
denial of service
remote attack
mailbox corruption
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.6
Confidence
High
EPSS
0.003
Percentile
65.2%
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
Affected configurations
Node
eric_allmansendmailMatch5.58
OReric_allmansendmailMatch5.59
OReric_allmansendmailMatch8.6.x
OReric_allmansendmailMatch8.7.1
OReric_allmansendmailMatch8.7.2
OReric_allmansendmailMatch8.7.3
OReric_allmansendmailMatch8.7.4
OReric_allmansendmailMatch8.7.5
OReric_allmansendmailMatch8.7.6
OReric_allmansendmailMatch8.7.x
OReric_allmansendmailMatch8.8
OReric_allmansendmailMatch8.8.1
OReric_allmansendmailMatch8.8.2
OReric_allmansendmailMatch8.8.3
OReric_allmansendmailMatch8.8.4
OReric_allmansendmailMatch8.8.5
OReric_allmansendmailMatch8.8.x
OReric_allmansendmailMatch8.9.1
OReric_allmansendmailMatch8.9.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| eric_allman | sendmail | 8.7.x | cpe:/a:eric_allman:sendmail:8.7.x::: |
| eric_allman | sendmail | 8.8.4 | cpe:/a:eric_allman:sendmail:8.8.4::: |
| eric_allman | sendmail | 5.58 | cpe:/a:eric_allman:sendmail:5.58::: |
| eric_allman | sendmail | 8.7.3 | cpe:/a:eric_allman:sendmail:8.7.3::: |
| eric_allman | sendmail | 8.8.3 | cpe:/a:eric_allman:sendmail:8.8.3::: |
| eric_allman | sendmail | 8.8.5 | cpe:/a:eric_allman:sendmail:8.8.5::: |
| eric_allman | sendmail | 8.9.1 | cpe:/a:eric_allman:sendmail:8.9.1::: |
| eric_allman | sendmail | 8.7.1 | cpe:/a:eric_allman:sendmail:8.7.1::: |
| eric_allman | sendmail | 8.6.x | cpe:/a:eric_allman:sendmail:8.6.x::: |
| eric_allman | sendmail | 8.7.4 | cpe:/a:eric_allman:sendmail:8.7.4::: |
Related
cvelist
cvelist
CVE-2000-0319
2000-10-13 04:00:00
openvas
openvas
Sendmail < 8.10.0 mail.local DoS Vulnerability
2005-11-03 00:00:00
nessus
nessus
Sendmail < 8.10.0 mail.local Newline Handling Remote DoS
2003-03-11 00:00:00
nvd
nvd
CVE-2000-0319
2000-04-23 04:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.6
Confidence
High
EPSS
0.003
Percentile
65.2%
Related for CVE-2000-0319