NetSight
IP …
critical10.0

CVE-2003-0694

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr func…

Impact

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

Affected products

VendorProductAffected versions
SendmailAdvanced Message Server
Versions 1.2, 1.3
SendmailSendmail
Versions 2.6, 2.6.1, 2.6.2, 3.0, 3.0.1, 3.0.2
SendmailSendmail Pro
Versions 8.9.2, 8.9.3
SendmailSendmail Switch
Versions 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5
SgiIrix
Versions 6.5.15, 6.5.16, 6.5.17f, 6.5.17m, 6.5.18f, 6.5.18m
AppleMac Os X
Versions 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5
AppleMac Os X Server
Versions 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5
CompaqTru64
Versions 4.0f, 4.0f_pk6_bl17, 4.0f_pk7_bl18, 4.0f_pk8_bl22, 4.0g, 4.0g_pk3_bl17
FreebsdFreebsd
Versions 3.0, 4.0, 4.3, 4.4, 4.5, 4.6
GentooLinux
Versions 0.5, 0.7, 1.1a, 1.2, 1.4
HpHp-Ux
Versions 11.00, 11.0.4, 11.11, 11.22
IbmAix
Versions 4.3.3, 5.1, 5.2

References