Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2003-0161
HistoryApr 02, 2003 - 5:00 a.m.

CVE-2003-0161

2003-04-0205:00:00
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.902 High

EPSS

Percentile

98.8%

JSON

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special “NOCHAR” control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.

Affected configurations

NVD
Node
sendmailsendmailMatch2.6
OR
sendmailsendmailMatch2.6.1
OR
sendmailsendmailMatch2.6.2
OR
sendmailsendmailMatch3.0
OR
sendmailsendmailMatch3.0.1
OR
sendmailsendmailMatch3.0.2
OR
sendmailsendmailMatch3.0.3
OR
sendmailsendmailMatch8.9.0
OR
sendmailsendmailMatch8.9.1
OR
sendmailsendmailMatch8.9.2
OR
sendmailsendmailMatch8.9.3
OR
sendmailsendmailMatch8.10
OR
sendmailsendmailMatch8.10.1
OR
sendmailsendmailMatch8.10.2
OR
sendmailsendmailMatch8.11.0
OR
sendmailsendmailMatch8.11.1
OR
sendmailsendmailMatch8.11.2
OR
sendmailsendmailMatch8.11.3
OR
sendmailsendmailMatch8.11.4
OR
sendmailsendmailMatch8.11.5
OR
sendmailsendmailMatch8.11.6
OR
sendmailsendmailMatch8.12beta10
OR
sendmailsendmailMatch8.12beta12
OR
sendmailsendmailMatch8.12beta16
OR
sendmailsendmailMatch8.12beta5
OR
sendmailsendmailMatch8.12beta7
OR
sendmailsendmailMatch8.12.0
OR
sendmailsendmailMatch8.12.1
OR
sendmailsendmailMatch8.12.2
OR
sendmailsendmailMatch8.12.3
OR
sendmailsendmailMatch8.12.4
OR
sendmailsendmailMatch8.12.5
OR
sendmailsendmailMatch8.12.6
OR
sendmailsendmailMatch8.12.7
OR
sendmailsendmailMatch8.12.8
OR
sendmailsendmail_switchMatch2.1
OR
sendmailsendmail_switchMatch2.1.1
OR
sendmailsendmail_switchMatch2.1.2
OR
sendmailsendmail_switchMatch2.1.3
OR
sendmailsendmail_switchMatch2.1.4
OR
sendmailsendmail_switchMatch2.1.5
OR
sendmailsendmail_switchMatch2.2
OR
sendmailsendmail_switchMatch2.2.1
OR
sendmailsendmail_switchMatch2.2.2
OR
sendmailsendmail_switchMatch2.2.3
OR
sendmailsendmail_switchMatch2.2.4
OR
sendmailsendmail_switchMatch2.2.5
OR
sendmailsendmail_switchMatch3.0
OR
sendmailsendmail_switchMatch3.0.1
OR
sendmailsendmail_switchMatch3.0.2
OR
sendmailsendmail_switchMatch3.0.3
Node
compaqtru64Match4.0b
OR
compaqtru64Match4.0d
OR
compaqtru64Match4.0d_pk9_bl17
OR
compaqtru64Match4.0f
OR
compaqtru64Match4.0f_pk6_bl17
OR
compaqtru64Match4.0f_pk7_bl18
OR
compaqtru64Match4.0g
OR
compaqtru64Match4.0g_pk3_bl17
OR
compaqtru64Match5.0
OR
compaqtru64Match5.0_pk4_bl17
OR
compaqtru64Match5.0_pk4_bl18
OR
compaqtru64Match5.0a
OR
compaqtru64Match5.0a_pk3_bl17
OR
compaqtru64Match5.0f
OR
compaqtru64Match5.1
OR
compaqtru64Match5.1_pk3_bl17
OR
compaqtru64Match5.1_pk4_bl18
OR
compaqtru64Match5.1_pk5_bl19
OR
compaqtru64Match5.1_pk6_bl20
OR
compaqtru64Match5.1a
OR
compaqtru64Match5.1a_pk1_bl1
OR
compaqtru64Match5.1a_pk2_bl2
OR
compaqtru64Match5.1a_pk3_bl3
OR
compaqtru64Match5.1b
OR
compaqtru64Match5.1b_pk1_bl1
OR
hphp-uxMatch10.00
OR
hphp-uxMatch10.01
OR
hphp-uxMatch10.08
OR
hphp-uxMatch10.09
OR
hphp-uxMatch10.10
OR
hphp-uxMatch10.16
OR
hphp-uxMatch10.20
OR
hphp-uxMatch10.24
OR
hphp-uxMatch10.26
OR
hphp-uxMatch10.30
OR
hphp-uxMatch10.34
OR
hphp-uxMatch11.00
OR
hphp-uxMatch11.0.4
OR
hphp-uxMatch11.11
OR
hphp-uxMatch11.20
OR
hphp-uxMatch11.22
OR
hphp-ux_series_700Match10.20
OR
hphp-ux_series_800Match10.20
OR
hpsis
OR
sunsolarisMatch2.4x86
OR
sunsolarisMatch2.5x86
OR
sunsolarisMatch2.5.1ppc
OR
sunsolarisMatch2.5.1x86
OR
sunsolarisMatch2.6
OR
sunsolarisMatch7.0x86
OR
sunsolarisMatch8.0x86
OR
sunsolarisMatch9.0sparc
OR
sunsolarisMatch9.0x86
OR
sunsolarisMatch9.0x86_update_2
OR
sunsunosMatch-
OR
sunsunosMatch5.4
OR
sunsunosMatch5.5
OR
sunsunosMatch5.5.1
OR
sunsunosMatch5.7
OR
sunsunosMatch5.8

References

Related

debiancve 2
nessus 15
cve 2
cvelist 2
openvas 12
redhat 2
debian 6
securityvulns 2
suse 2
osv 3
nvd 1
cert 2
checkpoint_advisories 1
debiancve
debiancve
CVE-2003-0161
2003-04-02 05:00:00
CVE-2002-1337
2004-09-01 04:00:00
nessus
nessus
HP-UX PHNE_28409 : s700_800 11.22 sendmail(1m) 8.11.1 patch
2005-02-16 00:00:00
HP-UX PHNE_29526 : s700_800 11.04 (VVOS) sendmail(1m) 8.9.3 patch
2005-02-16 00:00:00
RHEL 2.1 : sendmail (RHSA-2003:121)
2004-07-06 00:00:00
cve
cve
CVE-2003-0161
2003-04-02 05:00:00
CVE-2002-1337
2004-09-01 04:00:00
cvelist
cvelist
CVE-2003-0161
2003-04-01 05:00:00
CVE-2002-1337
2004-09-01 04:00:00
openvas
openvas
Debian Security Advisory DSA 278-2 (sendmail)
2008-01-17 00:00:00
Debian Security Advisory DSA 290-1 (sendmail-wide)
2008-01-17 00:00:00
Debian Security Advisory DSA 278-2 (sendmail)
2008-01-17 00:00:00
redhat
redhat
(RHSA-2003:121) sendmail security update
2003-03-31 00:00:00
(RHSA-2003:074) sendmail security update
2003-03-12 00:00:00
debian
debian
[SECURITY] [DSA 278-2] New sendmail packages fix DoS and arbitrary code execution
2003-04-04 14:57:35
[SECURITY] [DSA 278-1] New sendmail packages fix denial of service
2003-04-04 13:08:30
[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution
2003-04-17 13:58:45
securityvulns
securityvulns
Sendmail: -1 gone wild
2003-03-31 00:00:00
CERT Advisory CA-2003-12 Buffer Overflow in Sendmail
2003-03-31 00:00:00
suse
suse
local/remote privilege escalation in sendmail, sendmail-tls
2003-04-01 17:21:29
local privilege escalation in sendmail, sendmail-tls
2003-03-03 19:19:15
osv
osv
sendmail-wide - char-to-int conversion
2003-04-17 00:00:00
sendmail - char-to-int conversion
2003-04-04 00:00:00
sendmail - remote exploit
2003-03-04 00:00:00
nvd
nvd
CVE-2002-1337
2003-03-07 05:00:00
cert
cert
Remote Buffer Overflow in Sendmail
2003-03-03 00:00:00
Sendmail address parsing buffer overflow
2003-03-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Sendmail Header Processing Buffer Overflow (CVE-2002-1337)
2009-12-13 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.902 High

EPSS

Percentile

98.8%

JSON
Related for NVD:CVE-2003-0161
debiancve2nessus15cve2cvelist2openvas12redhat2debian6securityvulns2suse2osv3nvd1cert2checkpoint_advisories1