CVEvulnerability

CVE-2000-0319

5.0 MEDIUM Published 2000-04-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2000-04-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.

Affected configurations

• eric allman sendmail 5.58 • eric allman sendmail 5.59 • eric allman sendmail 8.6.x • eric allman sendmail 8.7.1 • eric allman sendmail 8.7.2 • eric allman sendmail 8.7.3 • eric allman sendmail 8.7.4 • eric allman sendmail 8.7.5 • eric allman sendmail 8.7.6 • eric allman sendmail 8.7.x • eric allman sendmail 8.8 • eric allman sendmail 8.8.1 • eric allman sendmail 8.8.2 • eric allman sendmail 8.8.3 • eric allman sendmail 8.8.4 • eric allman sendmail 8.8.5 • eric allman sendmail 8.8.x • eric allman sendmail 8.9.1 • eric allman sendmail 8.9.3

Related

Referenced by CWE · observed example (1)

  • CWE-147 Improper Neutralization of Input Terminators weakness

References