VDB
CVE-2003-0688
CVE-2003-0688
PUBLISHED
CVSS 5 MEDIUM
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.
EPSS 1.71% · 82.7th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
1.71%
82.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| openbsd | openbsd | 3.2 |
| sendmail | sendmail | 8.12.8, 8.12.1, 8.12.7 |
| sgi | irix | 6.5.20, 6.5.19, 6.5.21 |
| redhat | sendmail | 8.12.8-4, 8.12.5-7, 8.12.5-7 |
| freebsd | freebsd | 4.6, 5.0, 4.8 |
| compaq | tru64 | *, 5.1 |
Timeline
- Sep 3, 2003 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 11, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- MDKSA-2003:086 vendor-advisory
- oval:org.mitre.oval:def:597 vdb
- 20030803-01-P vendor-advisory
- http://www.sendmail.org/dnsmap1.html url
- RHSA-2003:265 vendor-advisory
- SuSE-SA:2003:035 vendor-advisory
- VU#993452 third-party-advisory
- CLA-2003:727 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2003-0688 advisory