CVE-2000-0452: Buffer Overflow
Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or stop the ESMTP service (stop the SMTP task or set ESMTP to disabled) on affected Lotus Domino Server 5.0.1 instances to prevent exploitation via a long MAIL FROM command until a vendor patch is available.
IBM Lotus Domino ESMTP service (Lotus Domino Server 5.0.1) enabled = false - Compensating control
Restrict or block inbound access to SMTP/ESMTP (TCP port 25) at the network perimeter (firewall/ACL) so that only trusted hosts may connect, until an official fix is released and applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0452?
CVE-2000-0452 is classified as a high severity vulnerability due to its potential to cause a denial of service.
What systems are affected by CVE-2000-0452?
CVE-2000-0452 affects Lotus Domino Server versions 5.0.1, 5.0.2, and 5.0.3.
How do I fix CVE-2000-0452?
To fix CVE-2000-0452, you should upgrade Lotus Domino Server to a version that eliminates this vulnerability.
What type of attack does CVE-2000-0452 allow?
CVE-2000-0452 allows remote attackers to execute a buffer overflow attack that can lead to denial of service.
What command causes the vulnerability in CVE-2000-0452?
The vulnerability in CVE-2000-0452 is triggered by a long MAIL FROM command in the ESMTP service.