CVE-2000-1203

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-08-20 · updated 2026-06-16

Description

Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender as bounce@[127.0.0.1] (localhost), which causes Domino to enter a mail loop.

Affected products

Lotus Domino: 4.6.1, 4.6.3, 4.6.4, 5.0.1, 5.0.2, 5.0.3 (+5)

References

http://marc.info/?l=vuln-dev&m=95886062521327&w=2
http://www.securityfocus.com/archive/1/209754
http://www.securityfocus.com/bid/3212
http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-21&end=2002-01-27&mid=209116&threads=1
https://exchange.xforce.ibmcloud.com/vulnerabilities/7012
http://marc.info/?l=vuln-dev&m=95886062521327&w=2
http://www.securityfocus.com/archive/1/209754
http://www.securityfocus.com/bid/3212
http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-21&end=2002-01-27&mid=209116&threads=1
https://exchange.xforce.ibmcloud.com/vulnerabilities/7012

Get alerted when CVE-2000-1203 or the next vulnerability affects your stack