CVE-2000-0319

mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:eric_allman:sendmail:5.58:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:5.59:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.6.x:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.7.1:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.7.2:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.7.3:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.7.4:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.7.5:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.7.6:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.7.x:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.8:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.8.1:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.8.2:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.8.3:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.8.4:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.8.5:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.8.x:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.9.1:*:*:*:*:*:*:*
cpe:2.3:a:eric_allman:sendmail:8.9.3:*:*:*:*:*:*:*

History

07 Nov 2023, 01:55

Type Values Removed Values Added
References
  • {'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=2694.000424@SECURITY.NNOV.RU', 'name': "20000424 unsafe fgets() in sendmail's mail.local", 'tags': [], 'refsource': 'BUGTRAQ'}
  • () http://www.securityfocus.com/templates/archive.pike?list=1&msg=2694.000424%40SECURITY.NNOV.RU -

Information

Published : 2000-04-23 04:00

Updated : 2024-02-28 10:24


NVD link : CVE-2000-0319

Mitre link : CVE-2000-0319

CVE.ORG link : CVE-2000-0319


JSON object : View

Products Affected

eric_allman

  • sendmail