CVE-2003-0161
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 38.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 38.79% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- sendmail/sendmail · sendmail/sendmail switch · compaq/tru64 · hp/hp-ux · hp/hp-ux series 700 · hp/hp-ux series 800 · hp/sis · sun/solaris · sun/sunos
- Source
- cve@mitre.org
References
- ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-016.0.txt
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:07.sendmail.asc
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt
- ftp://patches.sgi.com/support/free/security/advisories/20030401-01-P
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000614
- http://lists.apple.com/mhonarc/security-announce/msg00028.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004295.html
- http://marc.info/?l=bugtraq&m=104896621106790&w=2
- http://marc.info/?l=bugtraq&m=104897487512238&w=2
- http://marc.info/?l=bugtraq&m=104914999806315&w=2
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-52620-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-52700-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001088.1-1
- http://www.cert.org/advisories/CA-2003-12.htmlPatch, Third Party Advisory, US Government Resource
- http://www.debian.org/security/2003/dsa-278
- http://www.debian.org/security/2003/dsa-290
- http://www.gentoo.org/security/en/glsa/glsa-200303-27.xml
- http://www.kb.cert.org/vuls/id/897604US Government Resource
- http://www.redhat.com/support/errata/RHSA-2003-120.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2003-121.html
- http://www.securityfocus.com/archive/1/316961/30/25250/threaded
- http://www.securityfocus.com/archive/1/317135/30/25220/threaded
- http://www.securityfocus.com/archive/1/317135/30/25220/threaded
- http://www.securityfocus.com/archive/1/317135/30/25220/threaded
- http://www.securityfocus.com/archive/1/317135/30/25220/threaded
- http://www.securityfocus.com/archive/1/321997
- http://www.securityfocus.com/bid/7230Patch, Vendor Advisory
- ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-016.0.txt
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:07.sendmail.asc
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.