CVE-2000-0343

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/1158Exploit, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005021736.TAA01991%40ALuSSi
http://www.securityfocus.com/bid/1158Exploit, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005021736.TAA01991%40ALuSSi

Timeline

Published: May 2, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03445.0The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.CVE-2000-03452.1The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via th CVE-2000-03465.0AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web serve CVE-2000-03475.0Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.CVE-2000-034810.0A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain roo CVE-2000-03495.0Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.CVE-2000-03505.0A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and CVE-2000-03514.6Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.CVE-2000-035210.0Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary command CVE-2000-035310.0Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from CVE-2000-03545.0mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.CVE-2000-03557.5pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.