CVE-2000-0490: Buffer Overflow
Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NetWin dMailfrom your environment.Uninstall NetWin dMail / DSMTP if the service is not required.
- Configuration
If the DSMTP configuration allows, disable processing of ETRN requests to prevent remote exploitation via long ETRN inputs.
NetWin DSMTP (NetWin dMail) ETRN command handling = disabled - Compensating control
Block or filter ETRN commands and restrict access to the DSMTP service at the network perimeter (firewall, WAF, or ACL). Drop or reject SMTP sessions that contain unusually long ETRN arguments.
- Operational
Monitor logs for long or malformed ETRN requests, investigate and contain any suspected exploitation, and apply vendor patches or updates when they are published.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0490?
CVE-2000-0490 is considered critical as it allows remote attackers to execute arbitrary commands.
How do I fix CVE-2000-0490?
To mitigate CVE-2000-0490, upgrade the NetWin DSMTP package to a version that includes the patch against this vulnerability.
What versions of NetWin dmail are affected by CVE-2000-0490?
CVE-2000-0490 affects NetWin dmail versions 2.7q, 2.7, 2.8e, 2.8f, 2.8g, and 2.8h.
What type of attack does CVE-2000-0490 facilitate?
CVE-2000-0490 facilitates a buffer overflow attack through a maliciously crafted long ETRN request.
Is there any workaround for CVE-2000-0490?
As a temporary measure, disabling the ETRN command can serve as a workaround until the software is updated.