CVE-2000-0075

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published: Jan 13, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-00762.1nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.CVE-2000-00777.2The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver us CVE-2000-00787.2The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses CVE-2000-00797.5The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.CVE-2000-00802.1AIX techlibss allows local users to overwrite files via a symlink attack.CVE-2000-008110.0Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadeci CVE-2000-00825.0WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.CVE-2000-00834.6HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gai CVE-2000-00845.0CuteFTP uses weak encryption to store password information in its tree.dat file.CVE-2000-00857.5Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYN CVE-2000-00865.0Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing.CVE-2000-00875.0Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Comm