NetSight
IP …
critical10.0Public exploit code

CVE-2003-0161

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, whic…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.

Affected products

VendorProductAffected versions
SendmailSendmail
Versions 2.6, 2.6.1, 2.6.2, 3.0, 3.0.1, 3.0.2
SendmailSendmail Switch
Versions 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5
CompaqTru64
Versions 4.0b, 4.0d, 4.0d_pk9_bl17, 4.0f, 4.0f_pk6_bl17, 4.0f_pk7_bl18
HpHp-Ux
Versions 10.00, 10.01, 10.08, 10.09, 10.10, 10.16
HpHp-Ux Series 700
Version 10.20
HpHp-Ux Series 800
Version 10.20
HpSis
All versions
SunSolaris
Versions 2.4, 2.5, 2.5.1, 2.6, 7.0, 8.0
SunSunos
All versions
Versions 5.4, 5.5, 5.5.1, 5.7, 5.8

References