CVE Catalog

CVE-2000-0075

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.49%

83th percentile - higher than 83% of all known CVEs

Summary

Super Mail Transfer Package (SMTP), later known as MsgCore, has a memory leak that allows remote attackers to cause a denial of service by repeatedly sending HELO, MAIL FROM, RCPT TO, and DATA commands in the same session.

Risk Assessment

Attackers can exploit this vulnerability to disrupt service, leading to downtime and loss of availability for users.

Recommendation

It is recommended to update the software to the latest version to fix the memory leak and to monitor logs for suspicious activities.

Original NVD description (English source)

Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS