CVE

Id
6990  
CVE No.
CVE-2003-0161  
Status
Candidate  
Description
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.  
Phase
Assigned (20030324)  
Votes
NOOP(1) Christey  
Comments
Christey> MANDRAKE:MDKSA-2003:042 | (as suggested by Vincent Danen of Mandrake)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40680 6990 CVE-2003-0161 BUGTRAQ:20030329 Sendmail: -1 gone wild  View
40681 6990 CVE-2003-0161 URL:http://marc.info/?l=bugtraq&m=104897487512238&w=2  View
40682 6990 CVE-2003-0161 BUGTRAQ:20030520 [Fwd: 127 Research and Development: 127 Day!]  View
40683 6990 CVE-2003-0161 URL:http://www.securityfocus.com/archive/1/321997  View
40684 6990 CVE-2003-0161 BUGTRAQ:20030331 GLSA: sendmail (200303-27)  View
40685 6990 CVE-2003-0161 URL:http://www.securityfocus.com/archive/1/archive/1/316961/30/25250/threaded  View
40686 6990 CVE-2003-0161 BUGTRAQ:20030401 Immunix Secured OS 7+ openssl update  View
40687 6990 CVE-2003-0161 URL:http://www.securityfocus.com/archive/1/archive/1/317135/30/25220/threaded  View
40688 6990 CVE-2003-0161 FULLDISC:20030329 Sendmail: -1 gone wild  View
40689 6990 CVE-2003-0161 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004295.html  View
40690 6990 CVE-2003-0161 BUGTRAQ:20030329 sendmail 8.12.9 available  View
40691 6990 CVE-2003-0161 URL:http://marc.info/?l=bugtraq&m=104896621106790&w=2  View
40692 6990 CVE-2003-0161 GENTOO:GLSA-200303-27  View
40693 6990 CVE-2003-0161 URL:http://www.gentoo.org/security/en/glsa/glsa-200303-27.xml  View
40694 6990 CVE-2003-0161 IMMUNIX:IMNX-2003-7+-002-01  View
40695 6990 CVE-2003-0161 URL:http://www.securityfocus.com/archive/1/archive/1/317135/30/25220/threaded  View
40696 6990 CVE-2003-0161 SUNALERT:52620  View
40697 6990 CVE-2003-0161 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-52620-1  View
40698 6990 CVE-2003-0161 SUNALERT:52700  View
40699 6990 CVE-2003-0161 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-52700-1  View
40700 6990 CVE-2003-0161 SUNALERT:1001088  View
40701 6990 CVE-2003-0161 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001088.1-1  View
40702 6990 CVE-2003-0161 CERT:CA-2003-12  View
40703 6990 CVE-2003-0161 URL:http://www.cert.org/advisories/CA-2003-12.html  View
40704 6990 CVE-2003-0161 CERT-VN:VU#897604  View
40705 6990 CVE-2003-0161 URL:http://www.kb.cert.org/vuls/id/897604  View
40706 6990 CVE-2003-0161 FREEBSD:FreeBSD-SA-03:07  View
40707 6990 CVE-2003-0161 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:07.sendmail.asc  View
40708 6990 CVE-2003-0161 REDHAT:RHSA-2003:120  View
40709 6990 CVE-2003-0161 URL:http://www.redhat.com/support/errata/RHSA-2003-120.html  View
40710 6990 CVE-2003-0161 REDHAT:RHSA-2003:121  View
40711 6990 CVE-2003-0161 URL:http://www.redhat.com/support/errata/RHSA-2003-121.html  View
40712 6990 CVE-2003-0161 SCO:SCOSA-2004.11  View
40713 6990 CVE-2003-0161 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt  View
40714 6990 CVE-2003-0161 SUSE:SuSE-SA:2003:023  View
40715 6990 CVE-2003-0161 SGI:20030401-01-P  View
40716 6990 CVE-2003-0161 URL:ftp://patches.sgi.com/support/free/security/advisories/20030401-01-P  View
40717 6990 CVE-2003-0161 CALDERA:CSSA-2003-016.0  View
40718 6990 CVE-2003-0161 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-016.0.txt  View
40719 6990 CVE-2003-0161 DEBIAN:DSA-278  View
40720 6990 CVE-2003-0161 URL:http://www.debian.org/security/2003/dsa-278  View
40721 6990 CVE-2003-0161 DEBIAN:DSA-290  View
40722 6990 CVE-2003-0161 URL:http://www.debian.org/security/2003/dsa-290  View
40723 6990 CVE-2003-0161 CONECTIVA:CLA-2003:614  View
40724 6990 CVE-2003-0161 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000614  View
40725 6990 CVE-2003-0161 HP:SSRT3531  View
40726 6990 CVE-2003-0161 BUGTRAQ:20030330 [OpenPKG-SA-2003.027] OpenPKG Security Advisory (sendmail)  View
40727 6990 CVE-2003-0161 URL:http://marc.info/?l=bugtraq&m=104914999806315&w=2  View
40728 6990 CVE-2003-0161 CONFIRM:http://lists.apple.com/mhonarc/security-announce/msg00028.html  View
40729 6990 CVE-2003-0161 BID:7230  View

Related JVN