CVE-2000-0319

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2000-04-23 · updated 2026-06-16

Description

mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.

Affected products

Eric Allman Sendmail: 5.58, 5.59, 8.6.x, 8.7.1, 8.7.2, 8.7.3 (+13)

References

http://www.securityfocus.com/bid/1146
http://www.securityfocus.com/templates/archive.pike?list=1&msg=2694.000424%40SECURITY.NNOV.RU
http://www.securityfocus.com/bid/1146
http://www.securityfocus.com/templates/archive.pike?list=1&msg=2694.000424%40SECURITY.NNOV.RU

Get alerted when CVE-2000-0319 or the next vulnerability affects your stack