Vulnerability in N/a
CVE-2003-0694
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
EPSS: 0.761 (98.9th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 20030919 [OpenPKG-SA-2003.041] OpenPKG Security Advisory (sendmail) (mailing-list, x_refsource_BUGTRAQ)
- www.sendmail.org/8.12.10.html (x_refsource_CONFIRM)
- RHSA-2003:283 (x_refsource_REDHAT, vendor-advisory)
- 20030917 Sendmail 8.12.9 prescan bug (a new one) [CAN-2003-0694] (mailing-list, x_refsource_FULLDISC)
- CA-2003-25 (x_refsource_CERT, third-party-advisory)
- VU#784980 (x_refsource_CERT-VN, third-party-advisory)
- MDKSA-2003:092 (vendor-advisory, x_refsource_MANDRAKE)
- oval:org.mitre.oval:def:603 (signature, x_refsource_OVAL, vdb-entry)
- 20030917 [slackware-security] Sendmail vulnerabilities fixed (SSA:2003-260-02) (mailing-list, x_refsource_BUGTRAQ)
- DSA-384 (vendor-advisory, x_refsource_DEBIAN)
Frequently asked questions
- What is CVE-2003-0694?
- CVE-2003-0694 is a vulnerability in N/a. Published 2003-09-18.
- Is CVE-2003-0694 known to be exploited?
- 33 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.