PT-2000-1142 · Mmdf · Mmdf Server

Published 2000-02-16 · Updated 2008-09-10 · CVE-2000-0158

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MMDF server (affected versions not specified)

Description The issue is related to a buffer overflow in the MMDF server, which allows remote attackers to gain privileges. This can be achieved by sending a long MAIL FROM command to the SMTP daemon.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0158

Affected Products

Mmdf Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2000-0158 · Security Note
• ftp://ftp.sco.com/SSE/security_bulletins/SB-00.06a · Vendor Advisory
• http://securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=200002181449.JAA03436%40dragonfly.corp.home.net · Note
• http://securityfocus.com/bid/997 · Note
• http://securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000001bf78af%246d0d47a0%244d2f45a1%40jmagdych.na.nai.com · Note