CVEvulnerability

CVE-2003-0688

5.0 MEDIUM Published 2003-10-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-10-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.

Affected configurations

• redhat sendmail 8.12.5-7 • redhat sendmail 8.12.8-4 • sendmail sendmail 8.12.1 • sendmail sendmail 8.12.2 • sendmail sendmail 8.12.3 • sendmail sendmail 8.12.4 • sendmail sendmail 8.12.5 • sendmail sendmail 8.12.6 • sendmail sendmail 8.12.7 • sendmail sendmail 8.12.8 • sgi irix 6.5.19 • sgi irix 6.5.20 • sgi irix 6.5.21 • compaq tru64 5.0a • compaq tru64 5.1 • freebsd freebsd 4.6 • freebsd freebsd 4.7 • freebsd freebsd 4.8 • freebsd freebsd 5.0 • openbsd openbsd 3.2

References