CVE-2003-0161

Description

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 82.72% Top 5%

Vendor Advisory sun.com Vendor Advisory sun.com Vendor Advisory sgi.com Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory securityfocus.com Vendor Advisory sun.com Vendor Advisory caldera.com Vendor Advisory redhat.com Vendor Advisory com.br Vendor Advisory sco.com Vendor Advisory gentoo.org Vendor Advisory freebsd.org Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001088.1-1	vendor advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-52620-1	vendor advisory
ftp://patches.sgi.com/support/free/security/advisories/20030401-01-P	vendor advisory
http://www.securityfocus.com/bid/7230	vdb entry patch vendor advisory
http://marc.info/?l=bugtraq&m=104914999806315&w=2	mailing list
http://www.redhat.com/support/errata/RHSA-2003-120.html	patch vendor advisory
http://www.securityfocus.com/archive/1/317135/30/25220/threaded	mailing list vendor advisory
http://www.debian.org/security/2003/dsa-278	vendor advisory
http://www.debian.org/security/2003/dsa-290	vendor advisory
http://lists.apple.com/mhonarc/security-announce/msg00028.html
http://sunsolve.sun.com/search/document.do?assetkey=1-26-52700-1	vendor advisory
http://www.cert.org/advisories/CA-2003-12.html	us government resource third party advisory patch
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-016.0.txt	vendor advisory
http://www.securityfocus.com/archive/1/316961/30/25250/threaded	mailing list
http://www.redhat.com/support/errata/RHSA-2003-121.html	vendor advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000614	vendor advisory
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt	vendor advisory
http://www.gentoo.org/security/en/glsa/glsa-200303-27.xml	vendor advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004295.html	mailing list
http://marc.info/?l=bugtraq&m=104897487512238&w=2	mailing list
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:07.sendmail.asc	vendor advisory
http://www.securityfocus.com/archive/1/321997	mailing list
http://marc.info/?l=bugtraq&m=104896621106790&w=2	mailing list
http://www.kb.cert.org/vuls/id/897604	third party advisory us government resource

Frequently Asked Questions

What is the severity of CVE-2003-0161?: CVE-2003-0161 has been scored as a critical severity vulnerability.
How to fix CVE-2003-0161?: To fix CVE-2003-0161, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2003-0161 being actively exploited in the wild?: It is possible that CVE-2003-0161 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~83% probability that this vulnerability will be exploited by malicious actors in the next 30 days.