NVD

Id
73308  
Name
CVE-2003-0161  
Description
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2003-04-02  
Modified Date
2016-10-17  
Seq
2003-0161  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
377581 73308 CVE-2003-0161 CSSA-2003-016.0  View
377582 73308 CVE-2003-0161 FreeBSD-SA-03:07  View
377583 73308 CVE-2003-0161 SCOSA-2004.11  View
377584 73308 CVE-2003-0161 20030401-01-P  View
377585 73308 CVE-2003-0161 CLA-2003:614  View
377586 73308 CVE-2003-0161 http://lists.apple.com/mhonarc/security-announce/msg00028.html  View
377587 73308 CVE-2003-0161 20030329 Sendmail: -1 gone wild  View
377588 73308 CVE-2003-0161 20030329 sendmail 8.12.9 available  View
377589 73308 CVE-2003-0161 20030329 Sendmail: -1 gone wild  View
377590 73308 CVE-2003-0161 20030330 [OpenPKG-SA-2003.027] OpenPKG Security Advisory (sendmail)  View
377591 73308 CVE-2003-0161 52620  View
377592 73308 CVE-2003-0161 52700  View
377593 73308 CVE-2003-0161 1001088  View
377594 73308 CVE-2003-0161 CA-2003-12  View
377595 73308 CVE-2003-0161 DSA-278  View
377596 73308 CVE-2003-0161 DSA-290  View
377597 73308 CVE-2003-0161 GLSA-200303-27  View
377598 73308 CVE-2003-0161 VU#897604  View
377599 73308 CVE-2003-0161 RHSA-2003:120  View
377600 73308 CVE-2003-0161 RHSA-2003:121  View
377601 73308 CVE-2003-0161 20030520 [Fwd: 127 Research and Development: 127 Day!]  View
377602 73308 CVE-2003-0161 20030331 GLSA: sendmail (200303-27)  View
377603 73308 CVE-2003-0161 IMNX-2003-7+-002-01  View
377604 73308 CVE-2003-0161 7230  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63375 JVNDB-2003-000101 sendmail の prescan() 関数におけるバッファオーバーフローの脆弱性 sendmail の prescan() 関数において不備が存在し、電子メールアドレスの文字列長のチェックを適切に行わないために、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2003-0161 6989 CVE-2003-0161 73308 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000101.html 2003-03-29 2007-04-01 View