Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2003-0161


The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.


Published

2003-04-02T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sendmail sendmail 2.6 Yes
Application sendmail sendmail 2.6.1 Yes
Application sendmail sendmail 2.6.2 Yes
Application sendmail sendmail 3.0 Yes
Application sendmail sendmail 3.0.1 Yes
Application sendmail sendmail 3.0.2 Yes
Application sendmail sendmail 3.0.3 Yes
Application sendmail sendmail 8.9.0 Yes
Application sendmail sendmail 8.9.1 Yes
Application sendmail sendmail 8.9.2 Yes
Application sendmail sendmail 8.9.3 Yes
Application sendmail sendmail 8.10 Yes
Application sendmail sendmail 8.10.1 Yes
Application sendmail sendmail 8.10.2 Yes
Application sendmail sendmail 8.11.0 Yes
Application sendmail sendmail 8.11.1 Yes
Application sendmail sendmail 8.11.2 Yes
Application sendmail sendmail 8.11.3 Yes
Application sendmail sendmail 8.11.4 Yes
Application sendmail sendmail 8.11.5 Yes
Application sendmail sendmail 8.11.6 Yes
Application sendmail sendmail 8.12 Yes
Application sendmail sendmail 8.12 Yes
Application sendmail sendmail 8.12 Yes
Application sendmail sendmail 8.12 Yes
Application sendmail sendmail 8.12 Yes
Application sendmail sendmail 8.12.0 Yes
Application sendmail sendmail 8.12.1 Yes
Application sendmail sendmail 8.12.2 Yes
Application sendmail sendmail 8.12.3 Yes
Application sendmail sendmail 8.12.4 Yes
Application sendmail sendmail 8.12.5 Yes
Application sendmail sendmail 8.12.6 Yes
Application sendmail sendmail 8.12.7 Yes
Application sendmail sendmail 8.12.8 Yes
Application sendmail sendmail_switch 2.1 Yes
Application sendmail sendmail_switch 2.1.1 Yes
Application sendmail sendmail_switch 2.1.2 Yes
Application sendmail sendmail_switch 2.1.3 Yes
Application sendmail sendmail_switch 2.1.4 Yes
Application sendmail sendmail_switch 2.1.5 Yes
Application sendmail sendmail_switch 2.2 Yes
Application sendmail sendmail_switch 2.2.1 Yes
Application sendmail sendmail_switch 2.2.2 Yes
Application sendmail sendmail_switch 2.2.3 Yes
Application sendmail sendmail_switch 2.2.4 Yes
Application sendmail sendmail_switch 2.2.5 Yes
Application sendmail sendmail_switch 3.0 Yes
Application sendmail sendmail_switch 3.0.1 Yes
Application sendmail sendmail_switch 3.0.2 Yes
Application sendmail sendmail_switch 3.0.3 Yes
Operating System compaq tru64 4.0b Yes
Operating System compaq tru64 4.0d Yes
Operating System compaq tru64 4.0d_pk9_bl17 Yes
Operating System compaq tru64 4.0f Yes
Operating System compaq tru64 4.0f_pk6_bl17 Yes
Operating System compaq tru64 4.0f_pk7_bl18 Yes
Operating System compaq tru64 4.0g Yes
Operating System compaq tru64 4.0g_pk3_bl17 Yes
Operating System compaq tru64 5.0 Yes
Operating System compaq tru64 5.0_pk4_bl17 Yes
Operating System compaq tru64 5.0_pk4_bl18 Yes
Operating System compaq tru64 5.0a Yes
Operating System compaq tru64 5.0a_pk3_bl17 Yes
Operating System compaq tru64 5.0f Yes
Operating System compaq tru64 5.1 Yes
Operating System compaq tru64 5.1_pk3_bl17 Yes
Operating System compaq tru64 5.1_pk4_bl18 Yes
Operating System compaq tru64 5.1_pk5_bl19 Yes
Operating System compaq tru64 5.1_pk6_bl20 Yes
Operating System compaq tru64 5.1a Yes
Operating System compaq tru64 5.1a_pk1_bl1 Yes
Operating System compaq tru64 5.1a_pk2_bl2 Yes
Operating System compaq tru64 5.1a_pk3_bl3 Yes
Operating System compaq tru64 5.1b Yes
Operating System compaq tru64 5.1b_pk1_bl1 Yes
Operating System hp hp-ux 10.00 Yes
Operating System hp hp-ux 10.01 Yes
Operating System hp hp-ux 10.08 Yes
Operating System hp hp-ux 10.09 Yes
Operating System hp hp-ux 10.10 Yes
Operating System hp hp-ux 10.16 Yes
Operating System hp hp-ux 10.20 Yes
Operating System hp hp-ux 10.24 Yes
Operating System hp hp-ux 10.26 Yes
Operating System hp hp-ux 10.30 Yes
Operating System hp hp-ux 10.34 Yes
Operating System hp hp-ux 11.00 Yes
Operating System hp hp-ux 11.0.4 Yes
Operating System hp hp-ux 11.11 Yes
Operating System hp hp-ux 11.20 Yes
Operating System hp hp-ux 11.22 Yes
Operating System hp hp-ux_series_700 10.20 Yes
Operating System hp hp-ux_series_800 10.20 Yes
Operating System hp sis * Yes
Operating System sun solaris 2.4 Yes
Operating System sun solaris 2.5 Yes
Operating System sun solaris 2.5.1 Yes
Operating System sun solaris 2.5.1 Yes
Operating System sun solaris 2.6 Yes
Operating System sun solaris 7.0 Yes
Operating System sun solaris 8.0 Yes
Operating System sun solaris 9.0 Yes
Operating System sun solaris 9.0 Yes
Operating System sun solaris 9.0 Yes
Operating System sun sunos - Yes
Operating System sun sunos 5.4 Yes
Operating System sun sunos 5.5 Yes
Operating System sun sunos 5.5.1 Yes
Operating System sun sunos 5.7 Yes
Operating System sun sunos 5.8 Yes

References