Vulnerability in Compaq Tru64
CVE-2003-0688
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.
EPSS: 0.036 (88.1th percentile) — read the EPSS interpretation.
Affected products
- Compaq Tru64 — versions 5.0a, 5.1
- Freebsd — versions 4.6, 4.7, 4.8
- Openbsd — versions 3.2
- Sendmail — versions 8.12.1, 8.12.2, 8.12.3
- Sgi Irix — versions 6.5.19, 6.5.20, 6.5.21
- Redhat Sendmail — versions 8.12.5-7, 8.12.8-4
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)