CVE-2000-0320
Medium CVSS 5Published 2000-04-21 ยท last changed 2026-06-16
The fix
We hold no Microsoft remediation data for CVE-2000-0320, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.
What it is
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
Sources
CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:P