Unscored severity · published Oct 20, 2003
CVE-2003-0688
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a…
–
CVSS
3.6%
EPSS
No
On KEV
Description
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
4.6; 4.7; 4.8; 5.0 · source: NVD
IR
Irix · Sgi
6.5.19; 6.5.20; 6.5.21 · source: NVD
OP
Openbsd · Openbsd
3.2 · source: NVD
SE
Sendmail · Redhat
8.12.5-7; 8.12.5-7; 8.12.5-7; 8.12.5-7; 8.12.8-4; 8.12.8-4; +2 more · source: NVD
TR
Tru64 · Compaq
5.0a; 5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0688
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0688
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000727
US Government Resource
http://www.kb.cert.org/vuls/id/993452
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2003:086
www.novell.com
http://www.novell.com/linux/security/advisories/2003_035_sendmail.html
Patch
http://www.redhat.com/support/errata/RHSA-2003-265.html
More from Tru64
–
CVE-2005-0223
The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang)…
–
CVE-2003-0914
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL…
–
CVE-2003-0724
ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain…
–
CVE-2003-0694
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c
–
CVE-2003-0196
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different…