10

CVE-2003-0694

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sendmail ≫ Sendmail Version 2.6
Sendmail ≫ Sendmail Version 2.6.1
Sendmail ≫ Sendmail Version 2.6.2
Sendmail ≫ Sendmail Version 3.0
Sendmail ≫ Sendmail Version 3.0.1
Sendmail ≫ Sendmail Version 3.0.2
Sendmail ≫ Sendmail Version 3.0.3
Sendmail ≫ Sendmail Version 8.8.8
Sendmail ≫ Sendmail Version 8.9.0
Sendmail ≫ Sendmail Version 8.9.1
Sendmail ≫ Sendmail Version 8.9.2
Sendmail ≫ Sendmail Version 8.9.3
Sendmail ≫ Sendmail Version 8.10
Sendmail ≫ Sendmail Version 8.10.1
Sendmail ≫ Sendmail Version 8.10.2
Sendmail ≫ Sendmail Version 8.11.0
Sendmail ≫ Sendmail Version 8.11.1
Sendmail ≫ Sendmail Version 8.11.2
Sendmail ≫ Sendmail Version 8.11.3
Sendmail ≫ Sendmail Version 8.11.4
Sendmail ≫ Sendmail Version 8.11.5
Sendmail ≫ Sendmail Version 8.11.6
Sendmail ≫ Sendmail Version 8.12 Update beta10
Sendmail ≫ Sendmail Version 8.12 Update beta12
Sendmail ≫ Sendmail Version 8.12 Update beta16
Sendmail ≫ Sendmail Version 8.12 Update beta5
Sendmail ≫ Sendmail Version 8.12 Update beta7
Sendmail ≫ Sendmail Version 8.12.0
Sendmail ≫ Sendmail Version 8.12.1
Sendmail ≫ Sendmail Version 8.12.2
Sendmail ≫ Sendmail Version 8.12.3
Sendmail ≫ Sendmail Version 8.12.4
Sendmail ≫ Sendmail Version 8.12.5
Sendmail ≫ Sendmail Version 8.12.6
Sendmail ≫ Sendmail Version 8.12.7
Sendmail ≫ Sendmail Version 8.12.8
Sendmail ≫ Sendmail Version 8.12.9
Sendmail ≫ Sendmail Pro Version 8.9.2
Sendmail ≫ Sendmail Pro Version 8.9.3
Sendmail ≫ Sendmail Switch Version 2.1
Sendmail ≫ Sendmail Switch Version 2.1.1
Sendmail ≫ Sendmail Switch Version 2.1.2
Sendmail ≫ Sendmail Switch Version 2.1.3
Sendmail ≫ Sendmail Switch Version 2.1.4
Sendmail ≫ Sendmail Switch Version 2.1.5
Sendmail ≫ Sendmail Switch Version 2.2
Sendmail ≫ Sendmail Switch Version 2.2.1
Sendmail ≫ Sendmail Switch Version 2.2.2
Sendmail ≫ Sendmail Switch Version 2.2.3
Sendmail ≫ Sendmail Switch Version 2.2.4
Sendmail ≫ Sendmail Switch Version 2.2.5
Sendmail ≫ Sendmail Switch Version 3.0
Sendmail ≫ Sendmail Switch Version 3.0.1
Sendmail ≫ Sendmail Switch Version 3.0.2
Sendmail ≫ Sendmail Switch Version 3.0.3
Sgi ≫ Irix Version 6.5.15
Sgi ≫ Irix Version 6.5.16
Sgi ≫ Irix Version 6.5.17f
Sgi ≫ Irix Version 6.5.17m
Sgi ≫ Irix Version 6.5.18f
Sgi ≫ Irix Version 6.5.18m
Sgi ≫ Irix Version 6.5.19f
Sgi ≫ Irix Version 6.5.19m
Sgi ≫ Irix Version 6.5.20f
Sgi ≫ Irix Version 6.5.20m
Sgi ≫ Irix Version 6.5.21f
Sgi ≫ Irix Version 6.5.21m
Apple ≫ macOS X Version 10.2
Apple ≫ macOS X Version 10.2.1
Apple ≫ macOS X Version 10.2.2
Apple ≫ macOS X Version 10.2.3
Apple ≫ macOS X Version 10.2.4
Apple ≫ macOS X Version 10.2.5
Apple ≫ macOS X Version 10.2.6
Apple ≫ macOS X Server Version 10.2
Apple ≫ macOS X Server Version 10.2.1
Apple ≫ macOS X Server Version 10.2.2
Apple ≫ macOS X Server Version 10.2.3
Apple ≫ macOS X Server Version 10.2.4
Apple ≫ macOS X Server Version 10.2.5
Apple ≫ macOS X Server Version 10.2.6
Compaq ≫ Tru64 Version 4.0f
Compaq ≫ Tru64 Version 4.0f_pk6_bl17
Compaq ≫ Tru64 Version 4.0f_pk7_bl18
Compaq ≫ Tru64 Version 4.0f_pk8_bl22
Compaq ≫ Tru64 Version 4.0g
Compaq ≫ Tru64 Version 4.0g_pk3_bl17
Compaq ≫ Tru64 Version 4.0g_pk4_bl22
Compaq ≫ Tru64 Version 5.1
Compaq ≫ Tru64 Version 5.1_pk3_bl17
Compaq ≫ Tru64 Version 5.1_pk4_bl18
Compaq ≫ Tru64 Version 5.1_pk5_bl19
Compaq ≫ Tru64 Version 5.1_pk6_bl20
Compaq ≫ Tru64 Version 5.1a
Compaq ≫ Tru64 Version 5.1a_pk1_bl1
Compaq ≫ Tru64 Version 5.1a_pk2_bl2
Compaq ≫ Tru64 Version 5.1a_pk3_bl3
Compaq ≫ Tru64 Version 5.1a_pk4_bl21
Compaq ≫ Tru64 Version 5.1a_pk5_bl23
Compaq ≫ Tru64 Version 5.1b
Compaq ≫ Tru64 Version 5.1b_pk1_bl1
Compaq ≫ Tru64 Version 5.1b_pk2_bl22
Freebsd ≫ Freebsd Version 3.0 Update releng
Freebsd ≫ Freebsd Version 4.0 Update releng
Freebsd ≫ Freebsd Version 4.3 Update release_p38
Freebsd ≫ Freebsd Version 4.3 Update releng
Freebsd ≫ Freebsd Version 4.4 Update release_p42
Freebsd ≫ Freebsd Version 4.4 Update releng
Freebsd ≫ Freebsd Version 4.5 Update release_p32
Freebsd ≫ Freebsd Version 4.5 Update releng
Freebsd ≫ Freebsd Version 4.6 Update release_p20
Freebsd ≫ Freebsd Version 4.6 Update releng
Freebsd ≫ Freebsd Version 4.7 Update release_p17
Freebsd ≫ Freebsd Version 4.7 Update releng
Freebsd ≫ Freebsd Version 4.8 Update release_p6
Freebsd ≫ Freebsd Version 4.8 Update releng
Freebsd ≫ Freebsd Version 4.9 Update pre-release
Freebsd ≫ Freebsd Version 5.0 Update release_p14
Freebsd ≫ Freebsd Version 5.0 Update releng
Freebsd ≫ Freebsd Version 5.1 Update release_p5
Freebsd ≫ Freebsd Version 5.1 Update releng
Gentoo ≫ Linux Version 0.5
Gentoo ≫ Linux Version 0.7
Gentoo ≫ Linux Version 1.1a
Gentoo ≫ Linux Version 1.2
Gentoo ≫ Linux Version 1.4 Update rc1
Gentoo ≫ Linux Version 1.4 Update rc2
Gentoo ≫ Linux Version 1.4 Update rc3
Hp ≫ Hp-ux Version 11.00
Hp ≫ Hp-ux Version 11.0.4
Hp ≫ Hp-ux Version 11.11
Hp ≫ Hp-ux Version 11.22
Ibm ≫ Aix Version 4.3.3
Ibm ≫ Aix Version 5.1
Ibm ≫ Aix Version 5.2
Netbsd ≫ Netbsd Version 1.4.3
Netbsd ≫ Netbsd Version 1.5
Netbsd ≫ Netbsd Version 1.5 Edition sh3
Netbsd ≫ Netbsd Version 1.5 Edition x86
Netbsd ≫ Netbsd Version 1.5.1
Netbsd ≫ Netbsd Version 1.5.2
Netbsd ≫ Netbsd Version 1.5.3
Netbsd ≫ Netbsd Version 1.6
Netbsd ≫ Netbsd Version 1.6 Update beta
Netbsd ≫ Netbsd Version 1.6.1
Sun ≫ Solaris Version 2.6
Sun ≫ Solaris Version 7.0 Edition x86
Sun ≫ Solaris Version 8.0 Edition x86
Sun ≫ Solaris Version 9.0 Edition sparc
Sun ≫ Solaris Version 9.0 Edition x86
Sun ≫ Sunos Version -
Sun ≫ Sunos Version 5.7
Sun ≫ Sunos Version 5.8
Turbolinux ≫ Turbolinux Server Version 6.1
Turbolinux ≫ Turbolinux Server Version 6.5
Turbolinux ≫ Turbolinux Server Version 7.0
Turbolinux ≫ Turbolinux Server Version 8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 66.18% 0.992
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000742
http://marc.info/?l=bugtraq&m=106383437615742&w=2
http://marc.info/?l=bugtraq&m=106398718909274&w=2
http://www.debian.org/security/2003/dsa-384
http://www.mandriva.com/security/advisories?name=MDKSA-2003:092
http://www.redhat.com/support/errata/RHSA-2003-283.html
http://www.sendmail.org/8.12.10.html
Patch
http://archives.neohapsis.com/archives/fulldisclosure/2003-q3/4119.html
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0113.html
http://marc.info/?l=bugtraq&m=106381604923204&w=2
http://marc.info/?l=bugtraq&m=106382859407683&w=2
http://www.cert.org/advisories/CA-2003-25.html
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/784980
US Government Resource
http://www.redhat.com/support/errata/RHSA-2003-284.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2975
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A572
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A603