CVE-2003-0161

N/A

Beschreibung

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht4/2/2003

Zuletzt geandert4/16/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

compaq:tru64hp:hp-uxhp:hp-ux_series_700hp:hp-ux_series_800hp:sissendmail:sendmailsendmail:sendmail_switchsun:solarissun:sunos

Referenzen

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-016.0.txt(cve@mitre.org)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:07.sendmail.asc(cve@mitre.org)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt(cve@mitre.org)

ftp://patches.sgi.com/support/free/security/advisories/20030401-01-P(cve@mitre.org)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000614(cve@mitre.org)

http://lists.apple.com/mhonarc/security-announce/msg00028.html(cve@mitre.org)

http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004295.html(cve@mitre.org)

http://marc.info/?l=bugtraq&m=104896621106790&w=2(cve@mitre.org)

http://marc.info/?l=bugtraq&m=104897487512238&w=2(cve@mitre.org)

http://marc.info/?l=bugtraq&m=104914999806315&w=2(cve@mitre.org)

http://sunsolve.sun.com/search/document.do?assetkey=1-26-52620-1(cve@mitre.org)

http://sunsolve.sun.com/search/document.do?assetkey=1-26-52700-1(cve@mitre.org)

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001088.1-1(cve@mitre.org)

http://www.cert.org/advisories/CA-2003-12.html(cve@mitre.org)

http://www.debian.org/security/2003/dsa-278(cve@mitre.org)

http://www.debian.org/security/2003/dsa-290(cve@mitre.org)

http://www.gentoo.org/security/en/glsa/glsa-200303-27.xml(cve@mitre.org)

http://www.kb.cert.org/vuls/id/897604(cve@mitre.org)

http://www.redhat.com/support/errata/RHSA-2003-120.html(cve@mitre.org)

http://www.redhat.com/support/errata/RHSA-2003-121.html(cve@mitre.org)

http://www.securityfocus.com/archive/1/316961/30/25250/threaded(cve@mitre.org)

http://www.securityfocus.com/archive/1/317135/30/25220/threaded(cve@mitre.org)

http://www.securityfocus.com/archive/1/321997(cve@mitre.org)

http://www.securityfocus.com/bid/7230(cve@mitre.org)

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-016.0.txt(af854a3a-2127-422b-91ae-364da2661108)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:07.sendmail.asc(af854a3a-2127-422b-91ae-364da2661108)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt(af854a3a-2127-422b-91ae-364da2661108)

ftp://patches.sgi.com/support/free/security/advisories/20030401-01-P(af854a3a-2127-422b-91ae-364da2661108)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000614(af854a3a-2127-422b-91ae-364da2661108)

http://lists.apple.com/mhonarc/security-announce/msg00028.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004295.html(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=104896621106790&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=104897487512238&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=104914999806315&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://sunsolve.sun.com/search/document.do?assetkey=1-26-52620-1(af854a3a-2127-422b-91ae-364da2661108)

http://sunsolve.sun.com/search/document.do?assetkey=1-26-52700-1(af854a3a-2127-422b-91ae-364da2661108)

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001088.1-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.cert.org/advisories/CA-2003-12.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2003/dsa-278(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2003/dsa-290(af854a3a-2127-422b-91ae-364da2661108)

http://www.gentoo.org/security/en/glsa/glsa-200303-27.xml(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/897604(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2003-120.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2003-121.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/316961/30/25250/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/317135/30/25220/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/321997(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/7230(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.