CVE-2003-0694
Fixed in a distro release EPSS 66%
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Products: sendmail advanced_message_server, sendmail, sendmail_pro, sendmail_switch, sgi irix, apple mac_os_x, apple mac_os_x_server, compaq tru64, freebsd, gentoo linux, hp-ux, ibm aix, netbsd, sun solaris, sunos, turbolinux_advanced_server, turbolinux_server, turbolinux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sendmail | 8.12.10-1 |
| Debian 13 | sendmail | 8.12.10-1 |
| Debian 14 | sendmail | 8.12.10-1 |
| Debian 3.0 | sendmail | 8.12.3-6.6 |
| Debian 3.0 | sendmail-wide | 8.12.3+3.5Wbeta-5.5 |