CyberSec.Space Logo
Back to CVE Browser

CVE-2000-0490

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1520%
EPSS Percentile5.56th
PublishedJun 1, 2000
Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request.

Affected Platforms (CPE)

📦
Netwin

Dmail

= 2.7
📦
Netwin

Dmail

= 2.7q
📦
Netwin

Dmail

= 2.8e
📦
Netwin

Dmail

= 2.8f
📦
Netwin

Dmail

= 2.8g
📦
Netwin

Dmail

= 2.8h

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-05/0407.html
🔗 http://netwinsite.com/dmail/security.htm
🔗 http://www.securityfocus.com/bid/1297
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/4579
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-05/0407.html
🔗 http://netwinsite.com/dmail/security.htm
🔗 http://www.securityfocus.com/bid/1297
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/4579

Related Vulnerabilities

CVE-2001-135510.0

Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other ...

CVE-2008-500510.0

Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washingto...

CVE-2005-14787.5

Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string...

CVE-2005-15167.5

DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a se...