CVE-2000-1047: Buffer Overflow
Published Dec 11, 2000
·Updated
Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command.
Affected Software
10 affected components
Lotus Domino Mail Server=5.0.1
Lotus Domino Enterprise Server=5.0.1
Lotus Domino Mail Server=5.0.4
Lotus Domino Mail Server=5.0.2
Lotus Domino Enterprise Server=5.0.2b
Lotus Domino Enterprise Server=5.0.2
Lotus Domino Mail Server=5.0.3
Lotus Domino Mail Server=5.0.2b
Lotus Domino Enterprise Server=5.0.4
Lotus Domino Enterprise Server=5.0.3
Remediation
Patch Available
Patch Available
Event History
Dec 11, 2000
CVE Published
05:00 AM
Sep 18, 2001
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1047?
CVE-2000-1047 has a medium severity rating due to its potential to cause denial of service and execute arbitrary commands.
2
How do I fix CVE-2000-1047?
To fix CVE-2000-1047, upgrade to Lotus Domino version 5.0.5 or later, which addresses this vulnerability.
3
What software is affected by CVE-2000-1047?
CVE-2000-1047 affects IBM Lotus Domino Enterprise Server and Mail Server versions 5.0.1 through 5.0.4.
4
Can CVE-2000-1047 lead to server crashes?
Yes, CVE-2000-1047 can lead to crashes or denial of service due to the buffer overflow in the SMTP service.
5
Is CVE-2000-1047 exploitable remotely?
Yes, CVE-2000-1047 can be exploited remotely by attackers through crafted SMTP commands.