Lucene search
SuseSUSE-SA:2003:023HistoryApr 01, 2003 - 5:21 p.m.
local/remote privilege escalation in sendmail, sendmail-tls
2003-04-0117:21:29
lists.opensuse.org
18
0.172 Low
EPSS
Percentile
96.1%
sendmail is the most widely used mail transport agent (MTA) in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SuSE products. These versions include sendmail-8.11 and sendmail-8.12 releases. sendmail is the MTA subsystem that is installed by default on all SuSE products up to and including SuSE Linux 8.0 and the SuSE Linux Enterprise Server 7.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 7.3 | sparc | sendmail | < 8.11.6-65 | sendmail-8.11.6-65.sparc.rpm |
| openSUSE | 7.3 | sparc | sendmail-tls | < 8.11.6-65 | sendmail-tls-8.11.6-65.sparc.rpm |
| openSUSE | 8.0 | i386 | sendmail | < 8.12.3-75 | sendmail-8.12.3-75.i386.rpm |
| openSUSE | 7.2 | i386 | sendmail-tls | < 8.11.3-112 | sendmail-tls-8.11.3-112.i386.rpm |
| openSUSE | 7.3 | i386 | sendmail | < 8.11.6-164 | sendmail-8.11.6-164.i386.rpm |
| openSUSE | 7.1 | ppc | sendmail | < 8.11.2-34 | sendmail-8.11.2-34.ppc.rpm |
| openSUSE | 7.3 | ppc | sendmail | < 8.11.6-123 | sendmail-8.11.6-123.ppc.rpm |
| openSUSE | 7.3 | i386 | sendmail-tls | < 8.11.6-166 | sendmail-tls-8.11.6-166.i386.rpm |
| openSUSE | 7.1 | i386 | sendmail-tls | < 8.11.2-47 | sendmail-tls-8.11.2-47.i386.rpm |
| openSUSE | 7.3 | ppc | sendmail-tls | < 8.11.6-122 | sendmail-tls-8.11.6-122.ppc.rpm |
Related
securityvulns
securityvulns
CERT Advisory CA-2003-12 Buffer Overflow in Sendmail
2003-03-31 00:00:00
Sendmail: -1 gone wild
2003-03-31 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : sendmail (MDKSA-2003:042-1)
2004-07-31 00:00:00
Debian DSA-290-1 : sendmail-wide - char-to-int conversion
2004-09-29 00:00:00
Sendmail < 8.12.9 NOCHAR Control Value prescan Overflow
2003-03-29 00:00:00
openvas
openvas
Debian Security Advisory DSA 278-2 (sendmail)
2008-01-17 00:00:00
Debian Security Advisory DSA 278-1 (sendmail)
2008-01-17 00:00:00
Debian Security Advisory DSA 278-1 (sendmail)
2008-01-17 00:00:00
osv
osv
sendmail-wide - char-to-int conversion
2003-04-17 00:00:00
sendmail - char-to-int conversion
2003-04-04 00:00:00
debian
debian
cert
cert
Sendmail address parsing buffer overflow
2003-03-29 00:00:00
redhat
redhat
(RHSA-2003:121) sendmail security update
2003-03-31 00:00:00
cve
cve
CVE-2003-0161
2003-04-02 05:00:00
cvelist
cvelist
CVE-2003-0161
2003-04-01 05:00:00
debiancve
debiancve
CVE-2003-0161
2003-04-02 05:00:00
nvd
nvd
CVE-2003-0161
2003-04-02 05:00:00