CVE-2003-0681: Buffer Overflow
Published Sep 18, 2003
·Updated
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
Affected Software
105 affected components
Sendmail Sendmail Switch=2.1.2
Sendmail Sendmail Switch=3.0.2
Sendmail Sendmail Switch=2.2.2
Sendmail Sendmail=2.6.2
Sendmail Sendmail=8.9.2
Sendmail Sendmail Switch=2.1.1
Sendmail Sendmail=8.11.4
Sendmail Sendmail=8.8.8
Sendmail Sendmail=8.12-beta16
Sendmail Advanced Message Server=1.2
Sendmail Advanced Message Server=1.3
Sendmail Sendmail=8.11.1
Sendmail Sendmail=8.12.3
Sendmail Sendmail=8.12-beta12
Sendmail Sendmail Pro=8.9.2
Sendmail Sendmail Switch=2.2
Sendmail Sendmail=8.11.3
Sendmail Sendmail=8.12.4
Sendmail Sendmail Switch=2.2.1
Sendmail Sendmail=2.6
Sendmail Sendmail=2.6.1
Sendmail Sendmail=8.10.2
Sendmail Sendmail=8.11.0
Sendmail Sendmail=8.12.8
Sendmail Sendmail=8.12.9
Sendmail Sendmail=8.9.1
Sendmail Sendmail Switch=2.1.3
Sendmail Sendmail=8.10
Sendmail Sendmail=8.10.1
Sendmail Sendmail=8.11.5
Sendmail Sendmail=8.11.6
Sendmail Sendmail=8.12.6
Sendmail Sendmail=8.12.7
Sendmail Sendmail=8.9.0
Sendmail Sendmail Switch=2.2.3
Sendmail Sendmail Switch=2.2.4
Sendmail Sendmail=3.0
Sendmail Sendmail=3.0.1
Sendmail Sendmail=8.11.2
Sendmail Sendmail=8.12.2
Sendmail Sendmail=8.12-beta10
Sendmail Sendmail=8.9.3
Sendmail Sendmail Switch=2.1.5
Sendmail Sendmail Switch=3.0.3
Sendmail Sendmail=3.0.2
Sendmail Sendmail=3.0.3
Sendmail Sendmail=8.12.5
Sendmail Sendmail=8.12-beta5
Sendmail Sendmail=8.12-beta7
Sendmail Sendmail Pro=8.9.3
Sendmail Sendmail Switch=2.1
Sendmail Sendmail=8.12.0
Sendmail Sendmail=8.12.1
Sendmail Sendmail Switch=2.1.4
Sendmail Sendmail Switch=2.2.5
Sendmail Sendmail Switch=3.0
Sendmail Sendmail Switch=3.0.1
Turbolinux Turbolinux Server=6.5
NetBSD NetBSD=1.5.3
NetBSD NetBSD=1.6
Apple iOS and macOS=10.2.5
HP HP-UX=11.11
Apple Mac OS X Server=10.2.2
Apple Mac OS X Server=10.2.4
NetBSD NetBSD=1.5
Apple iOS and macOS=10.2.1
Apple iOS and macOS=10.2.2
Apple Mac OS X Server=10.2.3
Gentoo Linux=1.4-rc1
IBM AIX=5.2
Turbolinux Turbolinux Server=7.0
Gentoo Linux=0.5
HP HP-UX=11.00
NetBSD NetBSD=1.5.1
OpenBSD OpenBSD=3.3
NetBSD NetBSD=1.5
Apple iOS and macOS=10.2.4
Apple Mac OS X Server=10.2.5
Gentoo Linux=1.4-rc3
HP HP-UX=11.0.4
NetBSD NetBSD=1.6.1
NetBSD NetBSD=1.6-beta
Turbolinux Turbolinux Workstation=6.0
Turbolinux Turbolinux Workstation=7.0
Gentoo Linux=1.2
Gentoo Linux=1.4-rc2
IBM AIX=5.1
NetBSD NetBSD=1.5
Turbolinux Turbolinux Server=8.0
Apple iOS and macOS=10.2.6
Apple Mac OS X Server=10.2.6
NetBSD NetBSD=1.5.2
OpenBSD OpenBSD=3.2
Turbolinux Turbolinux Workstation=8.0
Apple iOS and macOS=10.2
Apple Mac OS X Server=10.2
Apple Mac OS X Server=10.2.1
Gentoo Linux=0.7
Gentoo Linux=1.1a
HP HP-UX=11.22
IBM AIX=4.3.3
Turbolinux Turbolinux Advanced Server=6.0
Turbolinux Turbolinux Server=6.1
Apple iOS and macOS=10.2.3
NetBSD NetBSD=1.4.3
Remediation
Patch Available
Event History
Sep 18, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Oct 6, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0681?
The severity of CVE-2003-0681 is classified as unknown due to unclear consequences.
2
What software versions are affected by CVE-2003-0681?
CVE-2003-0681 affects Sendmail versions including 2.1.1, 2.1.2, 8.12.9, and others.
3
How do I fix CVE-2003-0681?
To fix CVE-2003-0681, update Sendmail to a version not vulnerable to this buffer overflow issue.
4
What components of Sendmail are impacted by CVE-2003-0681?
CVE-2003-0681 impacts the nonstandard rulesets for recipient handling in Sendmail.
5
Is there a workaround for CVE-2003-0681?
Disabling the use of the nonstandard rulesets in Sendmail can serve as a temporary workaround for CVE-2003-0681.