VDB

CVE-2003-0694

CVE-2003-0694 PUBLISHED CVSS 10 CRITICAL

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

EPSS 66.18% · 99.2th percentile

Risk Scores

CVSS 2.0
10
EPSS Score
66.18%
99.2th percentile

Affected Products

VendorProductVersions
hphp-ux11.0.4, 11.22, 11.00
turbolinuxturbolinux_advanced_server6.0
freebsdfreebsd5.1, 5.0, 4.0
sgiirix6.5.19m, 6.5.20f, 6.5.20m
gentoolinux1.4, 1.4, 1.4
compaqtru64*, *, *
sendmailsendmail_switch2.1.4, 3.0.3, 3.0.2
sunsunos5.8, 5.7
applemac_os_x_server10.2, 10.2.1, 10.2.2
ibmaix5.1, 4.3.3, 5.2
sendmailsendmail_pro8.9.3, 8.9.2
turbolinuxturbolinux_server6.1, 7.0, 8.0
netbsdnetbsd1.5.1, 1.5.2, 1.5
turbolinuxturbolinux_workstation6.0, 8.0, 7.0
sunsolaris8.0, 9.0, 9.0
sendmailadvanced_message_server1.3, 1.2
n/an/a*
applemac_os_x10.2, 10.2.1, 10.2.2
sendmailsendmail8.11.0, 8.11.1, 8.11.2

Timeline

  • Sep 17, 2003 CVE Published
  • Jun 20, 2017 VulnCheck KEV Exploitation
  • May 29, 2018 PoC Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 27, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 9, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 26, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›