CVE Catalog
CVE-1999-0418
MediumExploitation Probability (EPSS)
High risk2.00%
78th percentile - higher than 78% of all known CVEs
Summary
CVE-1999-0418 vulnerability concerns a denial of service attack in SMTP applications like Sendmail. A remote attacker, such as a spammer, can exploit multiple 'RCPT TO' commands in the same connection session.
Risk Assessment
An attacker can cause the SMTP service to become unavailable, leading to disruptions in email communication within the organization.
Recommendation
It is recommended to monitor and limit the number of 'RCPT TO' commands in a single connection and implement mechanisms to protect against denial of service attacks.
Original NVD description (English source)
Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection.