CVE-2003-0694
52Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 60%
from disclosure to weapon0 days
Published on NVDSep 18
metasploitSep 17
VulnCheck+5024d
exploitation probability
60%top 1% of all CVEs
observed exploitation
yesVulnCheck
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Affected products
n/a · n/aReferences
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txthttp://archives.neohapsis.com/archives/fulldisclosure/2003-q3/4119.htmlhttp://archives.neohapsis.com/archives/vulnwatch/2003-q3/0113.htmlhttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000742http://marc.info/?l=bugtraq&m=106381604923204&w=2http://marc.info/?l=bugtraq&m=106382859407683&w=2http://marc.info/?l=bugtraq&m=106383437615742&w=2http://marc.info/?l=bugtraq&m=106398718909274&w=2https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2975https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A572https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A603http://www.cert.org/advisories/CA-2003-25.html