Search

published date: October 6, 2003

CVE-2003-0681 : Buffer Overflow Vulnerability

Description

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

Product(s):

  • Sendmail Sendmail Advanced Message Server 1.2
  • Sendmail Sendmail Advanced Message Server 1.3
  • Sendmail Sendmail 2.6.1
  • Sendmail Sendmail 2.6.2
  • Sendmail Sendmail 2.6
  • Sendmail Sendmail 3.0.1

Question to Ask Vendors:

  1. Can you confirm whether your systems are affected by CVE-2003-0681, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2003-0681 in your products or services, and how will you communicate updates on this issue to us as your customer?

READY TO GET RESULTS YOU CAN TRUST?