CVE:CVE-2000-1047
CNNVD:CNNVD-200012-044
Lotus Domino 5.0.4及其早期版本的SMTP服务存在缓冲区溢出。远程攻击者借助"MAIL FROM"命令的超长ENVID关键字导致服务拒绝和可能执行任意代码。
solution:Upgrade lotus domino_enterprise_server to a higher version than 5.0.1,5.0.2,5.0.2b,5.0.3,5.0.4,and avoid the version 5.0.1,5.0.2,5.0.2b,5.0.3,5.0.4; Upgrade lotus domino_mail_server to a higher version than 5.0.1,5.0.2,5.0.2b,5.0.3,5.0.4,and avoid the version 5.0.1,5.0.2,5.0.2b,5.0.3,5.0.4