Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2003-0681

Published: 06/10/2003 Updated: 03/05/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

Vulnerable Product Search on Vulmon Subscribe to Product

sendmail sendmail switch 2.1.2

sendmail sendmail switch 3.0.2

sendmail sendmail switch 2.2.2

sendmail sendmail 2.6.2

sendmail sendmail 8.9.2

sendmail sendmail switch 2.1.1

sendmail sendmail 8.11.4

sendmail sendmail 8.8.8

sendmail sendmail 8.12

sendmail sendmail 2.6

sendmail sendmail 8.11.1

sendmail sendmail 8.11.0

sendmail sendmail switch 2.1.3

sendmail sendmail 8.12.3

sendmail sendmail 8.11.3

sendmail sendmail switch 2.2.1

sendmail sendmail 2.6.1

sendmail advanced message server 1.3

sendmail sendmail 8.12.8

sendmail sendmail 8.12.9

sendmail sendmail 8.9.1

sendmail sendmail pro 8.9.2

sendmail advanced message server 1.2

sendmail sendmail switch 2.2

sendmail sendmail 8.10.2

sendmail sendmail 8.12.4

sendmail sendmail 8.9.0

sendmail sendmail 3.0.3

sendmail sendmail 8.10.1

sendmail sendmail switch 2.1

sendmail sendmail 8.12.1

sendmail sendmail 8.11.6

sendmail sendmail 8.12.5

sendmail sendmail switch 2.2.3

sendmail sendmail switch 2.1.5

sendmail sendmail 8.10

sendmail sendmail switch 3.0

sendmail sendmail 8.9.3

sendmail sendmail switch 2.2.5

sendmail sendmail 8.12.0

sendmail sendmail 8.12.6

sendmail sendmail switch 3.0.1

sendmail sendmail 3.0.2

sendmail sendmail pro 8.9.3

sendmail sendmail 8.12.2

sendmail sendmail 3.0

sendmail sendmail 8.11.2

sendmail sendmail 3.0.1

sendmail sendmail 8.12.7

sendmail sendmail switch 2.2.4

sendmail sendmail switch 3.0.3

sendmail sendmail 8.11.5

sendmail sendmail switch 2.1.4

turbolinux turbolinux server 6.5

netbsd netbsd 1.5.3

netbsd netbsd 1.6

apple mac os x 10.2.5

hp hp-ux 11.11

apple mac os x server 10.2.2

apple mac os x server 10.2.4

netbsd netbsd 1.5

apple mac os x 10.2.1

turbolinux turbolinux workstation 6.0

openbsd openbsd 3.3

turbolinux turbolinux server 7.0

netbsd netbsd 1.6.1

apple mac os x server 10.2.3

apple mac os x 10.2.4

ibm aix 5.2

gentoo linux 1.4

apple mac os x 10.2.2

hp hp-ux 11.00

gentoo linux 0.5

turbolinux turbolinux workstation 7.0

netbsd netbsd 1.5.1

apple mac os x server 10.2.5

hp hp-ux 11.0.4

openbsd openbsd 3.2

hp hp-ux 11.22

ibm aix 4.3.3

gentoo linux 1.1a

netbsd netbsd 1.5.2

apple mac os x server 10.2.6

turbolinux turbolinux workstation 8.0

netbsd netbsd 1.4.3

apple mac os x server 10.2

apple mac os x server 10.2.1

gentoo linux 0.7

apple mac os x 10.2.6

gentoo linux 1.2

turbolinux turbolinux server 6.1

turbolinux turbolinux advanced server 6.0

turbolinux turbolinux server 8.0

apple mac os x 10.2.3

ibm aix 5.1

apple mac os x 10.2

Vendor Advisories

Debian Security Advisories: DSA-384-1 sendmail -- buffer overflows
Two vulnerabilities were reported in sendmail CAN-2003-0681: A "potential buffer overflow in ruleset parsing" for Sendmail 8129, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences CAN-2003-0694: The prescan function in Sendmail 8129 allows remote at ...

Exploits

Exploit DB: Sendmail 8.12.9 - 'Prescan()' Variant Remote Buffer Overrun
/* source: wwwsecurityfocuscom/bid/8641/info Sendmail is prone to a buffer overrun vulnerability in the prescan() function This issue is different than the vulnerability described in BID 7230 This vulnerability could permit remote attackers to execute arbitrary code via vulnerable versions of Sendmail */ /* Local exploit for the old ...

References

NVD-CWE-Otherhttp://www.sendmail.org/8.12.10.htmlhttp://www.securityfocus.com/bid/8649http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000742http://www.debian.org/security/2003/dsa-384http://www.redhat.com/support/errata/RHSA-2003-283.htmlhttp://www.kb.cert.org/vuls/id/108964http://www.mandriva.com/security/advisories?name=MDKSA-2003:092http://marc.info/?l=bugtraq&m=106383437615742&w=2http://marc.info/?l=bugtraq&m=106398718909274&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/13216https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A595https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3606https://nvd.nist.govhttps://www.debian.org/security/./dsa-384https://www.exploit-db.com/exploits/23154/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook