Evil-DB LogoEvil-DB
← All CVEs

CVE-2003-0681

high · 7.5

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

7.5
CVSS
22.4%
EPSS (exploit prob.)
98th
EPSS percentile
2003-10-06
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
sendmailadvanced_message_server1.2
sendmailadvanced_message_server1.3
sendmailsendmail2.6
sendmailsendmail2.6.1
sendmailsendmail2.6.2
sendmailsendmail3.0
sendmailsendmail3.0.1
sendmailsendmail3.0.2
sendmailsendmail3.0.3
sendmailsendmail8.8.8
sendmailsendmail8.9.0
sendmailsendmail8.9.1
sendmailsendmail8.9.2
sendmailsendmail8.9.3
sendmailsendmail8.10
sendmailsendmail8.10.1
sendmailsendmail8.10.2
sendmailsendmail8.11.0
sendmailsendmail8.11.1
sendmailsendmail8.11.2
sendmailsendmail8.11.3
sendmailsendmail8.11.4
sendmailsendmail8.11.5
sendmailsendmail8.11.6
sendmailsendmail8.12
sendmailsendmail8.12
sendmailsendmail8.12
sendmailsendmail8.12
sendmailsendmail8.12
sendmailsendmail8.12.0
sendmailsendmail8.12.1
sendmailsendmail8.12.2
sendmailsendmail8.12.3
sendmailsendmail8.12.4
sendmailsendmail8.12.5
sendmailsendmail8.12.6
sendmailsendmail8.12.7
sendmailsendmail8.12.8
sendmailsendmail8.12.9
sendmailsendmail_pro8.9.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0681