CVE-2000-0319
MediumExploitation Probability (EPSS)
High risk76th percentile - higher than 76% of all known CVEs
Summary
mail.local in Sendmail 8.10.x does not properly identify the . string which indicates the end of message text. This allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in . .
Risk Assessment
The organization may experience denial of service and mailbox corruption, potentially leading to data loss and communication disruption.
Recommendation
It is recommended to update Sendmail to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.