CVE-2000-1047 Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FRO...
HighCVSS 10.0
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lotus domino enterprise server | = 5.0.1 | No fix listed |
| lotus domino enterprise server | = 5.0.2 | No fix listed |
| lotus domino enterprise server | = 5.0.2b | No fix listed |
| lotus domino enterprise server | = 5.0.3 | No fix listed |
| lotus domino enterprise server | = 5.0.4 | No fix listed |
| lotus domino mail server | = 5.0.1 | No fix listed |
| lotus domino mail server | = 5.0.2 | No fix listed |
| lotus domino mail server | = 5.0.2b | No fix listed |
| lotus domino mail server | = 5.0.3 | No fix listed |
| lotus domino mail server | = 5.0.4 | No fix listed |
References
- 442 vdb-entry
- 20001103 [SAFER] Buffer overflow in Lotus Domino SMTP Server exploit mailing-list patch vendor-advisory
- 1905 patch vdb-entry vendor-advisory
- lotus-domino-smtp-envid(5488) vdb-entry