Vulnerability Intelligence Report
CVE-2003-0681
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:20.08%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| sendmail | advanced_message_server | 1.2, 1.3 |
| sendmail | sendmail | 2.6, 2.6.1, 2.6.2, 3.0, 3.0.1, 3.0.2, 3.0.3, 8.8.8, 8.9.0, 8.9.1, 8.9.2, 8.9.3, 8.10, 8.10.1, 8.10.2, 8.11.0, 8.11.1, 8.11.2, 8.11.3, 8.11.4, 8.11.5, 8.11.6, 8.12, 8.12.0, 8.12.1, 8.12.2, 8.12.3, 8.12.4, 8.12.5, 8.12.6, 8.12.7, 8.12.8, 8.12.9 |
| sendmail | sendmail_pro | 8.9.2, 8.9.3 |
| sendmail | sendmail_switch | 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.2, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 3.0, 3.0.1, 3.0.2, 3.0.3 |
| apple | mac_os_x | 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5, 10.2.6 |
| apple | mac_os_x_server | 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5, 10.2.6 |
| gentoo | linux | 0.5, 0.7, 1.1a, 1.2, 1.4 |
| hp | hp-ux | 11.00, 11.0.4, 11.11, 11.22 |
| ibm | aix | 4.3.3, 5.1, 5.2 |
| netbsd | netbsd | 1.4.3, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6, 1.6.1 |
| openbsd | openbsd | 3.2, 3.3 |
| turbolinux | turbolinux_advanced_server | 6.0 |
| turbolinux | turbolinux_server | 6.1, 6.5, 7.0, 8.0 |
| turbolinux | turbolinux_workstation | 6.0, 7.0, 8.0 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
20.081%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2003-08-13T00:00:00 |
| Published | 2003-09-18T04:00:00 |
| Patch Date | 2003-09-17 |
| Last Updated | 2024-08-08T02:05:11 |
Community Chatter & Buzz