CVE-2000-1046: Buffer Overflow

Published Nov 29, 2000

Updated

Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands.

Affected Software

2 affected components

Lotus Domino=5.0.2c

Lotus Domino=5.0.2a

Remediation

Patch Available

http://archives.neohapsis.com/archives/bugtraq/2000-09/0093.html

Event History

Nov 29, 2000

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1046?

CVE-2000-1046 is considered a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2000-1046?

To fix CVE-2000-1046, it is recommended to upgrade Lotus Domino to version 5.0.3 or later.

What types of commands can trigger CVE-2000-1046?

CVE-2000-1046 can be triggered by long ESMTP commands such as 'RCPT TO', 'SAML FROM', or 'SOML FROM'.

What are the risks associated with CVE-2000-1046?

The risks associated with CVE-2000-1046 include denial of service and potential arbitrary code execution by remote attackers.

Which versions of Lotus Domino are affected by CVE-2000-1046?

CVE-2000-1046 affects Lotus Domino versions 5.0.2c and earlier, including 5.0.2a.