critical
10
CWE
119 NVD-CWE-Other
Advisory Published
Updated

CVE-2003-0694: Buffer Overflow

First published: Thu Sep 18 2003(Updated: )

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Sendmail Advanced Message Server=1.2
Sendmail Advanced Message Server=1.3
Sendmail Sendmail=2.6
Sendmail Sendmail=2.6.1
Sendmail Sendmail=2.6.2
Sendmail Sendmail=3.0
Sendmail Sendmail=3.0.1
Sendmail Sendmail=3.0.2
Sendmail Sendmail=3.0.3
Sendmail Sendmail=8.8.8
Sendmail Sendmail=8.9.0
Sendmail Sendmail=8.9.1
Sendmail Sendmail=8.9.2
Sendmail Sendmail=8.9.3
Sendmail Sendmail=8.10
Sendmail Sendmail=8.10.1
Sendmail Sendmail=8.10.2
Sendmail Sendmail=8.11.0
Sendmail Sendmail=8.11.1
Sendmail Sendmail=8.11.2
Sendmail Sendmail=8.11.3
Sendmail Sendmail=8.11.4
Sendmail Sendmail=8.11.5
Sendmail Sendmail=8.11.6
Sendmail Sendmail=8.12-beta10
Sendmail Sendmail=8.12-beta12
Sendmail Sendmail=8.12-beta16
Sendmail Sendmail=8.12-beta5
Sendmail Sendmail=8.12-beta7
Sendmail Sendmail=8.12.0
Sendmail Sendmail=8.12.1
Sendmail Sendmail=8.12.2
Sendmail Sendmail=8.12.3
Sendmail Sendmail=8.12.4
Sendmail Sendmail=8.12.5
Sendmail Sendmail=8.12.6
Sendmail Sendmail=8.12.7
Sendmail Sendmail=8.12.8
Sendmail Sendmail=8.12.9
Sendmail Sendmail Pro=8.9.2
Sendmail Sendmail Pro=8.9.3
Sendmail Sendmail Switch=2.1
Sendmail Sendmail Switch=2.1.1
Sendmail Sendmail Switch=2.1.2
Sendmail Sendmail Switch=2.1.3
Sendmail Sendmail Switch=2.1.4
Sendmail Sendmail Switch=2.1.5
Sendmail Sendmail Switch=2.2
Sendmail Sendmail Switch=2.2.1
Sendmail Sendmail Switch=2.2.2
Sendmail Sendmail Switch=2.2.3
Sendmail Sendmail Switch=2.2.4
Sendmail Sendmail Switch=2.2.5
Sendmail Sendmail Switch=3.0
Sendmail Sendmail Switch=3.0.1
Sendmail Sendmail Switch=3.0.2
Sendmail Sendmail Switch=3.0.3
SGI IRIX=6.5.15
SGI IRIX=6.5.16
SGI IRIX=6.5.17f
SGI IRIX=6.5.17m
SGI IRIX=6.5.18f
SGI IRIX=6.5.18m
SGI IRIX=6.5.19f
SGI IRIX=6.5.19m
SGI IRIX=6.5.20f
SGI IRIX=6.5.20m
SGI IRIX=6.5.21f
SGI IRIX=6.5.21m
Apple Mac OS X=10.2
Apple Mac OS X=10.2.1
Apple Mac OS X=10.2.2
Apple Mac OS X=10.2.3
Apple Mac OS X=10.2.4
Apple Mac OS X=10.2.5
Apple Mac OS X=10.2.6
Apple Mac OS X Server=10.2
Apple Mac OS X Server=10.2.1
Apple Mac OS X Server=10.2.2
Apple Mac OS X Server=10.2.3
Apple Mac OS X Server=10.2.4
Apple Mac OS X Server=10.2.5
Apple Mac OS X Server=10.2.6
Compaq Tru64=4.0f
Compaq Tru64=4.0f_pk6_bl17
Compaq Tru64=4.0f_pk7_bl18
Compaq Tru64=4.0f_pk8_bl22
Compaq Tru64=4.0g
Compaq Tru64=4.0g_pk3_bl17
Compaq Tru64=4.0g_pk4_bl22
Compaq Tru64=5.1
Compaq Tru64=5.1_pk3_bl17
Compaq Tru64=5.1_pk4_bl18
Compaq Tru64=5.1_pk5_bl19
Compaq Tru64=5.1_pk6_bl20
Compaq Tru64=5.1a
Compaq Tru64=5.1a_pk1_bl1
Compaq Tru64=5.1a_pk2_bl2
Compaq Tru64=5.1a_pk3_bl3
Compaq Tru64=5.1a_pk4_bl21
Compaq Tru64=5.1a_pk5_bl23
Compaq Tru64=5.1b
Compaq Tru64=5.1b_pk1_bl1
Compaq Tru64=5.1b_pk2_bl22
FreeBSD FreeBSD=3.0-releng
FreeBSD FreeBSD=4.0-releng
FreeBSD FreeBSD=4.3-release_p38
FreeBSD FreeBSD=4.3-releng
FreeBSD FreeBSD=4.4-release_p42
FreeBSD FreeBSD=4.4-releng
FreeBSD FreeBSD=4.5-release_p32
FreeBSD FreeBSD=4.5-releng
FreeBSD FreeBSD=4.6-release_p20
FreeBSD FreeBSD=4.6-releng
FreeBSD FreeBSD=4.7-release_p17
FreeBSD FreeBSD=4.7-releng
FreeBSD FreeBSD=4.8-release_p6
FreeBSD FreeBSD=4.8-releng
FreeBSD FreeBSD=4.9-pre-release
FreeBSD FreeBSD=5.0-release_p14
FreeBSD FreeBSD=5.0-releng
FreeBSD FreeBSD=5.1-release_p5
FreeBSD FreeBSD=5.1-releng
Gentoo Linux=0.5
Gentoo Linux=0.7
Gentoo Linux=1.1a
Gentoo Linux=1.2
Gentoo Linux=1.4-rc1
Gentoo Linux=1.4-rc2
Gentoo Linux=1.4-rc3
HP HP-UX=11.00
HP HP-UX=11.0.4
HP HP-UX=11.11
HP HP-UX=11.22
IBM AIX=4.3.3
IBM AIX=5.1
IBM AIX=5.2
NetBSD NetBSD=1.4.3
NetBSD NetBSD=1.5
NetBSD NetBSD=1.5
NetBSD NetBSD=1.5
NetBSD NetBSD=1.5.1
NetBSD NetBSD=1.5.2
NetBSD NetBSD=1.5.3
NetBSD NetBSD=1.6
NetBSD NetBSD=1.6-beta
NetBSD NetBSD=1.6.1
Sun Solaris=2.6
Sun Solaris=7.0
Sun Solaris=8.0
Sun Solaris=9.0
Sun Solaris=9.0
Sun SunOS
Sun SunOS=5.7
Sun SunOS=5.8
Turbolinux Turbolinux Advanced Server=6.0
Turbolinux Turbolinux Server=6.1
Turbolinux Turbolinux Server=6.5
Turbolinux Turbolinux Server=7.0
Turbolinux Turbolinux Server=8.0
Turbolinux Turbolinux Workstation=6.0
Turbolinux Turbolinux Workstation=7.0
Turbolinux Turbolinux Workstation=8.0

Remedy

http://www.cert.org/advisories/CA-2003-25.html

Remedy

http://www.sendmail.org/8.12.10.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203