Description
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://marc.info/?l=bugtraq&m=106398718909274&w=2 ↗
- http://www.sendmail.org/8.12.10.html ↗
- http://www.redhat.com/support/errata/RHSA-2003-283.html ↗
- http://archives.neohapsis.com/archives/fulldisclosure/2003-q3/4119.html ↗
- http://www.cert.org/advisories/CA-2003-25.html ↗
- http://www.kb.cert.org/vuls/id/784980 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:092 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A603 ↗
- http://marc.info/?l=bugtraq&m=106382859407683&w=2 ↗
- http://www.debian.org/security/2003/dsa-384 ↗
- http://www.redhat.com/support/errata/RHSA-2003-284.html ↗
- http://marc.info/?l=bugtraq&m=106383437615742&w=2 ↗
- http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0113.html ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A572 ↗
- http://marc.info/?l=bugtraq&m=106381604923204&w=2 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2975 ↗
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000742 ↗