CVE-2003-0694

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

66.18% chance of exploitation in the next 30 days, 99th percentile

Published

2003-09-18

Updated

2024-08-08

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/smtp/sendmail_prescan.rb

Security advisories

• http://www.cert.org/advisories/CA-2003-25.html
• http://www.sendmail.org/8.12.10.html
• http://www.kb.cert.org/vuls/id/784980
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:092
• http://www.redhat.com/support/errata/RHSA-2003-283.html
• http://www.redhat.com/support/errata/RHSA-2003-284.html

References

• CVE Record
• NVD entry