CVE-2003-0681 A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences...
HighCVSS 7.5
EPSS 22.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail advanced message server | = 1.2 | No fix listed |
| sendmail advanced message server | = 1.3 | No fix listed |
| sendmail | = 2.6 | No fix listed |
| sendmail | = 2.6.1 | No fix listed |
| sendmail | = 2.6.2 | No fix listed |
| sendmail | = 3.0 | No fix listed |
| sendmail | = 3.0.1 | No fix listed |
| sendmail | = 3.0.2 | No fix listed |
| sendmail | = 3.0.3 | No fix listed |
| sendmail | = 8.8.8 | No fix listed |
| sendmail | = 8.9.0 | No fix listed |
| sendmail | = 8.9.1 | No fix listed |
| sendmail | = 8.9.2 | No fix listed |
| sendmail | = 8.9.3 | No fix listed |
| sendmail | = 8.10 | No fix listed |
| sendmail | = 8.10.1 | No fix listed |
| sendmail | = 8.10.2 | No fix listed |
| sendmail | = 8.11.0 | No fix listed |
| sendmail | = 8.11.1 | No fix listed |
| sendmail | = 8.11.2 | No fix listed |
| sendmail | = 8.11.3 | No fix listed |
| sendmail | = 8.11.4 | No fix listed |
| sendmail | = 8.11.5 | No fix listed |
| sendmail | = 8.11.6 | No fix listed |
| sendmail | = 8.12-beta10 | No fix listed |
Show 81 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | = 8.12-beta12 | No fix listed |
| sendmail | = 8.12-beta16 | No fix listed |
| sendmail | = 8.12-beta5 | No fix listed |
| sendmail | = 8.12-beta7 | No fix listed |
| sendmail | = 8.12.0 | No fix listed |
| sendmail | = 8.12.1 | No fix listed |
| sendmail | = 8.12.2 | No fix listed |
| sendmail | = 8.12.3 | No fix listed |
| sendmail | = 8.12.4 | No fix listed |
| sendmail | = 8.12.5 | No fix listed |
| sendmail | = 8.12.6 | No fix listed |
| sendmail | = 8.12.7 | No fix listed |
| sendmail | = 8.12.8 | No fix listed |
| sendmail | = 8.12.9 | No fix listed |
| sendmail pro | = 8.9.2 | No fix listed |
| sendmail pro | = 8.9.3 | No fix listed |
| sendmail switch | = 2.1 | No fix listed |
| sendmail switch | = 2.1.1 | No fix listed |
| sendmail switch | = 2.1.2 | No fix listed |
| sendmail switch | = 2.1.3 | No fix listed |
| sendmail switch | = 2.1.4 | No fix listed |
| sendmail switch | = 2.1.5 | No fix listed |
| sendmail switch | = 2.2 | No fix listed |
| sendmail switch | = 2.2.1 | No fix listed |
| sendmail switch | = 2.2.2 | No fix listed |
| sendmail switch | = 2.2.3 | No fix listed |
| sendmail switch | = 2.2.4 | No fix listed |
| sendmail switch | = 2.2.5 | No fix listed |
| sendmail switch | = 3.0 | No fix listed |
| sendmail switch | = 3.0.1 | No fix listed |
| sendmail switch | = 3.0.2 | No fix listed |
| sendmail switch | = 3.0.3 | No fix listed |
| apple mac os x | = 10.2 | No fix listed |
| apple mac os x | = 10.2.1 | No fix listed |
| apple mac os x | = 10.2.2 | No fix listed |
| apple mac os x | = 10.2.3 | No fix listed |
| apple mac os x | = 10.2.4 | No fix listed |
| apple mac os x | = 10.2.5 | No fix listed |
| apple mac os x | = 10.2.6 | No fix listed |
| apple mac os x server | = 10.2 | No fix listed |
| apple mac os x server | = 10.2.1 | No fix listed |
| apple mac os x server | = 10.2.2 | No fix listed |
| apple mac os x server | = 10.2.3 | No fix listed |
| apple mac os x server | = 10.2.4 | No fix listed |
| apple mac os x server | = 10.2.5 | No fix listed |
| apple mac os x server | = 10.2.6 | No fix listed |
| gentoo linux | = 0.5 | No fix listed |
| gentoo linux | = 0.7 | No fix listed |
| gentoo linux | = 1.1a | No fix listed |
| gentoo linux | = 1.2 | No fix listed |
| gentoo linux | = 1.4-rc1 | No fix listed |
| gentoo linux | = 1.4-rc2 | No fix listed |
| gentoo linux | = 1.4-rc3 | No fix listed |
| HP Inc hp-ux | = 11.00 | No fix listed |
| HP Inc hp-ux | = 11.0.4 | No fix listed |
| HP Inc hp-ux | = 11.11 | No fix listed |
| HP Inc hp-ux | = 11.22 | No fix listed |
| ibm aix | = 4.3.3 | No fix listed |
| ibm aix | = 5.1 | No fix listed |
| ibm aix | = 5.2 | No fix listed |
| netbsd | = 1.4.3 | No fix listed |
| netbsd | = 1.5 | No fix listed |
| netbsd | = 1.5.1 | No fix listed |
| netbsd | = 1.5.2 | No fix listed |
| netbsd | = 1.5.3 | No fix listed |
| netbsd | = 1.6 | No fix listed |
| netbsd | = 1.6-beta | No fix listed |
| netbsd | = 1.6.1 | No fix listed |
| OpenBSD | = 3.2 | No fix listed |
| OpenBSD | = 3.3 | No fix listed |
| turbolinux advanced server | = 6.0 | No fix listed |
| turbolinux server | = 6.1 | No fix listed |
| turbolinux server | = 6.5 | No fix listed |
| turbolinux server | = 7.0 | No fix listed |
| turbolinux server | = 8.0 | No fix listed |
| turbolinux workstation | = 6.0 | No fix listed |
| turbolinux workstation | = 7.0 | No fix listed |
| turbolinux workstation | = 8.0 | No fix listed |
| debian/sendmail(Debian:12) | < 8.12.10-1 | 8.12.10-1 |
| debian/sendmail(Debian:13) | < 8.12.10-1 | 8.12.10-1 |
| debian/sendmail(Debian:14) | < 8.12.10-1 | 8.12.10-1 |
References
- Debian Security Tracker CVE-2003-0681 vendor-advisory
- CLA-2003:742 vendor-advisory
- 20030917 GLSA: sendmail (200309-13) mailing-list
- 20030919 [OpenPKG-SA-2003.041] OpenPKG Security Advisory (sendmail) mailing-list
- DSA-384 vendor-advisory
- VU#108964 third-party-advisory us-government-resource
- MDKSA-2003:092 vendor-advisory
- RHSA-2003:283 vendor-advisory
- 8649 vdb-entry vendor-advisory
- www.sendmail.org patch
- sendmail-ruleset-parsing-bo(13216) vdb-entry
- oval:org.mitre.oval:def:3606 signature vdb-entry
- oval:org.mitre.oval:def:595 signature vdb-entry