Search

published date: October 6, 2003

CVE-2003-0694 : Buffer Overflow Vulnerability

Description

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

Product(s):

  • Sendmail Sendmail Advanced Message Server 1.2
  • Sendmail Sendmail Advanced Message Server 1.3
  • Sendmail Sendmail 2.6.1
  • Sendmail Sendmail 2.6.2
  • Sendmail Sendmail 2.6
  • Sendmail Sendmail 3.0.1

Question to Ask Vendors:

  1. Can you confirm whether your systems are affected by CVE-2003-0694, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2003-0694 in your products or services, and how will you communicate updates on this issue to us as your customer?

READY TO GET RESULTS YOU CAN TRUST?