CVEvulnerability

CVE-2003-0161

10.0 HIGH Published 2003-04-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-04-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.

Affected configurations

• sendmail sendmail 2.6 • sendmail sendmail 2.6.1 • sendmail sendmail 2.6.2 • sendmail sendmail 3.0 • sendmail sendmail 3.0.1 • sendmail sendmail 3.0.2 • sendmail sendmail 3.0.3 • sendmail sendmail 8.9.0 • sendmail sendmail 8.9.1 • sendmail sendmail 8.9.2 • sendmail sendmail 8.9.3 • sendmail sendmail 8.10 • sendmail sendmail 8.10.1 • sendmail sendmail 8.10.2 • sendmail sendmail 8.11.0 • sendmail sendmail 8.11.1 • sendmail sendmail 8.11.2 • sendmail sendmail 8.11.3 • sendmail sendmail 8.11.4 • sendmail sendmail 8.11.5 • sendmail sendmail 8.11.6 • sendmail sendmail 8.12 • sendmail sendmail 8.12.0 • sendmail sendmail 8.12.1 • sendmail sendmail 8.12.2 • sendmail sendmail 8.12.3 • sendmail sendmail 8.12.4 • sendmail sendmail 8.12.5 • sendmail sendmail 8.12.6 • sendmail sendmail 8.12.7 • sendmail sendmail 8.12.8 • sendmail sendmail switch 2.1 • sendmail sendmail switch 2.1.1 • sendmail sendmail switch 2.1.2 • sendmail sendmail switch 2.1.3 • sendmail sendmail switch 2.1.4 • sendmail sendmail switch 2.1.5 • sendmail sendmail switch 2.2 • sendmail sendmail switch 2.2.1 • sendmail sendmail switch 2.2.2 • sendmail sendmail switch 2.2.3 • sendmail sendmail switch 2.2.4 • sendmail sendmail switch 2.2.5 • sendmail sendmail switch 3.0 • sendmail sendmail switch 3.0.1 • sendmail sendmail switch 3.0.2 • sendmail sendmail switch 3.0.3 • compaq tru64 4.0b • compaq tru64 4.0d • compaq tru64 4.0d pk9 bl17 • compaq tru64 4.0f • compaq tru64 4.0f pk6 bl17 • compaq tru64 4.0f pk7 bl18 • compaq tru64 4.0g • compaq tru64 4.0g pk3 bl17 • compaq tru64 5.0 • compaq tru64 5.0 pk4 bl17 • compaq tru64 5.0 pk4 bl18 • compaq tru64 5.0a • compaq tru64 5.0a pk3 bl17 … and 44 more

Related

Referenced by CWE · observed example (1)

  • CWE-194 Unexpected Sign Extension weakness

References