CVE-2003-0681

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets 1 recipient 2, final, or 3 mailer-specific envelope recipients, has unknown consequences...

CVE-2003-0694

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c...

CVE-2003-0681

CVE-2003-0681 relates to a potential buffer overflow in Sendmail 8.12.x rule-set parsing when nonstandard rulesets (recipient, final, or mailer-specific envelope recipients) are used. Public documents indicate vulnerable Sendmail variants across platforms (notably HP-UX patches PHNE_35483/PHNE_35...

CVE-2003-0681

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets 1 recipient 2, final, or 3 mailer-specific envelope recipients, has unknown consequences...

CVE-2003-0694

CVE-2003-0694 affects Sendmail 8.12.9, where the prescan function (parsing SMTP headers in parseaddr.c) can be exploited remotely via a buffer overflow to execute arbitrary code. Debian DSA-384 also references CAN-2003-0694 in its two vulnerabilities entry. The available documents confirm affecte...

CVE-2003-0694

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c...

[SECURITY] [DSA-384-1] New sendmail packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 384-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 17th, 2003 http://www.debian.org/security/faq -...

Sendmail contains buffer overflow in ruleset parsing

Overview Sendmail contains a buffer overflow vulnerability in the code that parses rulesets. This vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on a vulnerable system.This vulnerability does not affect the default configuration. Description...

Critical: Red Hat Security Advisory: : Updated Sendmail packages fix vulnerability.

Updated Sendmail packages that fix a potentially-exploitable vulnerability are now available. Sendmail is a widely used Mail Transport Agent MTA and is included in all Red Hat Linux distributions. Michal Zalewski found a bug in the prescan function of unpatched Sendmail versions prior to 8.12.10...

Critical: Red Hat Security Advisory: sendmail security update

Updated Sendmail packages that fix a potentially-exploitable vulnerability are now available. Sendmail is a widely used Mail Transport Agent MTA and is included in all Red Hat Enterprise Linux distributions. There is a bug in the prescan function of Sendmail versions prior to and including 8.12.9...

Sendmail vulnerabilities fixed

The sendmail packages in Slackware 8.1, 9.0, and -current have been patched to fix security problems. These issues seem to be remotely exploitable, so all sites running sendmail should upgrade right away. Sendmail's 8.12.10 announcement may be found here: http://www.sendmail.org/8.12.10.html Here...

Sendmail 8.12.9 - Prescan() Variant Remote Buffer Overrun

Sendmail 8.12.9 - Prescan Variant Remote Buffer Overrun / source: https://www.securityfocus.com/bid/8641/info Sendmail is prone to a buffer overrun vulnerability in the prescan function. This issue is different than the vulnerability described in BID 7230. This vulnerability could permit remote...

DSA-384 sendmail - buffer overflows

Bulletin has no description...

[Full-Disclosure] Sendmail 8.12.9 prescan bug (a new one) [CAN-2003-0694]

Hello lists, -------- Overview -------- There seems to be a remotely exploitable vulnerability in Sendmail up to and including the latest version, 8.12.9. The problem lies in prescan function, but is not related to previous issues with this code. The primary attack vector is an indirect invocatio...

Sendmail 8.12.9 - 'Prescan()' Variant Remote Buffer Overrun

/ source: https://www.securityfocus.com/bid/8641/info Sendmail is prone to a buffer overrun vulnerability in the prescan function. This issue is different than the vulnerability described in BID 7230. This vulnerability could permit remote attackers to execute arbitrary code via vulnerable versio...

FreeBSD-SA-03:13.sendmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:13.sendmail Security Advisory The FreeBSD Project Topic: a third sendmail header parsing buffer overflow Category: contrib Module: contribsendmail Announced:...

Sendmail prescan() buffer overflow vulnerability

Overview Sendmail contains a buffer overflow vulnerability in code that parses email addresses. This vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on a vulnerable system. Description Sendmail is a widely used mail transfer agent MTA. There is a...

Sendmail < 8.12.10 prescan() Function Remote Overflow

According to its version number, the remote Sendmail server is between 5.79 to 8.12.9. Such versions are reportedly vulnerable to remote buffer overflow attacks, one in the 'prescan' function and another involving its ruleset processing. A remote user may be able to leverage these issues to gain...

CVE-2003-0688

The CVE-2003-0688 issue affects the Sendmail 8.12.x line (including 8.12.8) when using the DNS maps feature enabled via ENHDNSBL. The vulnerability stems from improper initialization of RESOURCE_RECORD_T data structures, causing Sendmail to call free() on incorrect or uninitialized data after rec...

CVE-2003-0688

The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service process crash via an invalid DNS response that causes Sendmail to free incorrect data...