CVE-2000-0319: Eric Allman Sendmail

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.

Affected products

• Eric Allman Sendmail: version 5.58 only; version 5.59 only; version 8.6.x only; version 8.7.1 only; version 8.7.2 only; version 8.7.3 only; …

Published 2000-04-23. Last modified 2026-06-16.