CVE-2000-0196: Nmh

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.

Affected products

• Nmh Nmh: version 1.0.2 only
• Red Hat Linux: version 5.2 only; version 6.0 only; version 6.1 only
• Turbolinux Turbolinux: version 3.5b2 only; version 4.2 only; version 4.4 only; version 6.0.2 only

Published 2000-02-28. Last modified 2026-06-16.