First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2000-1047

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.osvdb.org/442
http://www.securityfocus.com/archive/1/143071Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/1905Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5488
http://www.osvdb.org/442
http://www.securityfocus.com/archive/1/143071Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/1905Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5488

Timeline

Published: Dec 11, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-10485.0Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files v CVE-2000-10495.0Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." chara CVE-2000-10505.0Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an ext CVE-2000-10515.0Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.CVE-2000-10525.0Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.CVE-2000-105310.0Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack an CVE-2000-105410.0Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and poss CVE-2000-105510.0Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbit CVE-2000-10567.5CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null CVE-2000-10574.6Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privi CVE-2000-10585.0Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial CVE-2000-10597.2The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost