Vulnerability in Lotus Domino

CVE-2000-1203

Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender as bounce@[127.0.0.1] (localhost), which causes Domino to enter a mail loop.

EPSS: 0.025 (82.9th percentile) — read the EPSS interpretation.

Affected products

  • Lotus Domino — versions 4.6.1, 4.6.3, 4.6.4
  • N/a — versions n/a

References