peter bassill · operator
$ cve CVE-2003-0681 JSON

CVE-2003-0681 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 22.4% (pctl 98)

Patch early

A public exploit exists.

Description

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS22.36% — more likely to be exploited than 98% of all CVEs
On CISA KEVno
Public exploityes
Published2003-10-06
Last modified2026-06-16

Affected (14)

VendorProduct
applemac os x
applemac os x server
gentoolinux
hphp-ux
ibmaix
netbsdnetbsd
openbsdopenbsd
sendmailadvanced message server
sendmailsendmail
sendmailsendmail pro
sendmailsendmail switch
turbolinuxturbolinux advanced server
turbolinuxturbolinux server
turbolinuxturbolinux workstation

Public exploits

SourceTitleDate
exploit-dbSendmail 8.12.9 - 'Prescan()' Variant Remote Buffer Overrun2003-09-17

References

→ the Explorer  ·  watch your stack  ·  NVD