CVE-2000-0196: Buffer Overflow
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
nmh (mhshow)from your environment.Uninstall or remove the nmh package or the mhshow component from systems that do not require it to eliminate the vulnerable binary.
- Compensating control
At the mail gateway or MTA, filter, reject or quarantine messages with malformed or suspicious MIME headers to prevent delivery to systems running mhshow; additionally, block or isolate hosts running mhshow from untrusted mail sources until the vulnerability is remediated.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0196?
CVE-2000-0196 is considered a critical vulnerability due to its potential for remote code execution through crafted email messages.
How do I fix CVE-2000-0196?
To fix CVE-2000-0196, update the nmh package to a version that has addressed this buffer overflow vulnerability.
Which software versions are affected by CVE-2000-0196?
CVE-2000-0196 affects nmh version 1.0.2 as well as certain versions of Red Hat and Turbolinux operating systems.
What type of attack does CVE-2000-0196 enable?
CVE-2000-0196 enables attackers to execute arbitrary commands on a vulnerable system through specially crafted MIME headers in email messages.
How can I identify if my system is vulnerable to CVE-2000-0196?
You can identify vulnerability to CVE-2000-0196 by checking if your software includes nmh 1.0.2 or is running affected versions of Red Hat or Turbolinux.