Evil-DB LogoEvil-DB
← All CVEs

CVE-2003-0694

high · 10

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

10
CVSS
66.2%
EPSS (exploit prob.)
99th
EPSS percentile
2003-10-06
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

VendorProductAffected versions
sendmailadvanced_message_server1.2
sendmailadvanced_message_server1.3
sendmailsendmail2.6
sendmailsendmail2.6.1
sendmailsendmail2.6.2
sendmailsendmail3.0
sendmailsendmail3.0.1
sendmailsendmail3.0.2
sendmailsendmail3.0.3
sendmailsendmail8.8.8
sendmailsendmail8.9.0
sendmailsendmail8.9.1
sendmailsendmail8.9.2
sendmailsendmail8.9.3
sendmailsendmail8.10
sendmailsendmail8.10.1
sendmailsendmail8.10.2
sendmailsendmail8.11.0
sendmailsendmail8.11.1
sendmailsendmail8.11.2
sendmailsendmail8.11.3
sendmailsendmail8.11.4
sendmailsendmail8.11.5
sendmailsendmail8.11.6
sendmailsendmail8.12
sendmailsendmail8.12
sendmailsendmail8.12
sendmailsendmail8.12
sendmailsendmail8.12
sendmailsendmail8.12.0
sendmailsendmail8.12.1
sendmailsendmail8.12.2
sendmailsendmail8.12.3
sendmailsendmail8.12.4
sendmailsendmail8.12.5
sendmailsendmail8.12.6
sendmailsendmail8.12.7
sendmailsendmail8.12.8
sendmailsendmail8.12.9
sendmailsendmail_pro8.9.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0694