Vulnerability Name:

CVE-2003-0161 (CCN-11653)

Assigned:2003-03-29
Published:2003-03-29
Updated:2018-10-30
Summary:The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.
CVSS v3 Severity:10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: CALDERA
Type: UNKNOWN
CSSA-2003-016.0

Source: CCN
Type: FreeBSD Security Advisory FreeBSD-SA-03:07.sendmail
a second sendmail header parsing buffer overflow

Source: FREEBSD
Type: UNKNOWN
FreeBSD-SA-03:07

Source: CCN
Type: SCO Security Advisory CSSA-2003-016.0
OpenLinux: sendmail sign extension buffer overflow

Source: SCO
Type: UNKNOWN
SCOSA-2004.11

Source: CCN
Type: SGI Security Advisory 20030401-01-P
Sendmail parseaddr security vulnerability

Source: SGI
Type: UNKNOWN
20030401-01-P

Source: CCN
Type: VulnWatch Mailing List, Sat Mar 29 2003 - 14:05:32 CST
Sendmail: -1 gone wild

Source: MITRE
Type: CNA
CVE-2003-0161

Source: CONECTIVA
Type: UNKNOWN
CLA-2003:614

Source: CCN
Type: Conectiva Linux Security Announcement CLSA-2003:614
sendmail

Source: CCN
Type: Apple Security-Announce Mailing List, Thu, 10 Apr 2003 14:44:25 -0700
APPLE-SA-2003-04-10 Mac OS X 10.2.5

Source: CONFIRM
Type: UNKNOWN
http://lists.apple.com/mhonarc/security-announce/msg00028.html

Source: FULLDISC
Type: UNKNOWN
20030329 Sendmail: -1 gone wild

Source: BUGTRAQ
Type: UNKNOWN
20030329 sendmail 8.12.9 available

Source: BUGTRAQ
Type: UNKNOWN
20030329 Sendmail: -1 gone wild

Source: BUGTRAQ
Type: UNKNOWN
20030330 [OpenPKG-SA-2003.027] OpenPKG Security Advisory (sendmail)

Source: CCN
Type: RHSA-2003-120
Updated sendmail packages fix vulnerability

Source: CCN
Type: RHSA-2003-121
sendmail security update

Source: CCN
Type: RHSA-2003-227
Updated sendmail packages fix vulnerabilities

Source: CCN
Type: Sun Alert ID: 52620
sendmail(1M) Parses Addresses Incorrectly in Certain Corner Cases

Source: CCN
Type: Sun Alert ID: 52700
Sun Linux and Cobalt Legacy Products are Vulnerable to Additional sendmail(1M) Buffer Overflow

Source: SUNALERT
Type: UNKNOWN
52620

Source: SUNALERT
Type: UNKNOWN
52700

Source: SUNALERT
Type: UNKNOWN
1001088

Source: CCN
Type: CERT Advisory CA-2003-12
Buffer Overflow in Sendmail

Source: CERT
Type: Patch, Third Party Advisory, US Government Resource
CA-2003-12

Source: CCN
Type: CIAC Information Bulletin N-067
Sendmail MTA Buffer Overflow Vulnerability

Source: DEBIAN
Type: UNKNOWN
DSA-278

Source: DEBIAN
Type: UNKNOWN
DSA-290

Source: DEBIAN
Type: DSA-278
sendmail -- char-to-int conversion

Source: DEBIAN
Type: DSA-290
sendmail-wide -- char-to-int conversion

Source: GENTOO
Type: UNKNOWN
GLSA-200303-27

Source: CCN
Type: Internet Security Systems Security Alert, March 29, 2003
Email Processing Vulnerability in Sendmail

Source: CCN
Type: US-CERT VU#897604
Sendmail address parsing buffer overflow

Source: CERT-VN
Type: US Government Resource
VU#897604

Source: CCN
Type: SCO Security Advisory SCOSA-2004.11
OpenServer 5.0.6 OpenServer 5.0.7 : Multiple Vulnerabilities in Sendmail

Source: CCN
Type: Gentoo Security Announcement 200303-27
sendmail buffer overflow

Source: CCN
Type: Immunix OS Security Advisory IMNX-2003-7+-002-01
sendmail

Source: CCN
Type: NetBSD Security Advisory 2003-009
sendmail buffer overrun in prescan() address parser

Source: CCN
Type: OpenPKG-SA-2003.027
Sendmail

Source: REDHAT
Type: Patch, Vendor Advisory
RHSA-2003:120

Source: REDHAT
Type: UNKNOWN
RHSA-2003:121

Source: BUGTRAQ
Type: UNKNOWN
20030331 GLSA: sendmail (200303-27)

Source: BUGTRAQ
Type: UNKNOWN
20030401 Immunix Secured OS 7+ openssl update

Source: BUGTRAQ
Type: UNKNOWN
20030520 [Fwd: 127 Research and Development: 127 Day!]

Source: BID
Type: Patch, Vendor Advisory
7230

Source: CCN
Type: BID-7230
Sendmail Address Prescan Memory Corruption Vulnerability

Source: CCN
Type: Sendmail Consortium Web site
Sendmail 8.12.9

Source: CCN
Type: TLSA-2003-24
Remotely exploitable vulnerability in sendmail

Source: XF
Type: UNKNOWN
sendmail-address-parser-bo(11653)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:sendmail:sendmail:2.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.3:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:compaq:tru64:4.0b:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0d:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0d_pk9_bl17:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0f:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0f_pk6_bl17:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0f_pk7_bl18:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0g:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0g_pk3_bl17:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.0:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.0_pk4_bl17:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.0_pk4_bl18:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.0a:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.0a_pk3_bl17:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.0f:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1_pk3_bl17:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1_pk4_bl18:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1_pk5_bl19:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1_pk6_bl20:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a_pk1_bl1:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a_pk2_bl2:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a_pk3_bl3:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1b:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1b_pk1_bl1:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.00:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.01:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.08:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.09:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.10:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.16:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.20:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.24:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.26:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.30:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.34:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.00:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.11:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.20:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.22:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux_series_700:10.20:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux_series_800:10.20:*:*:*:*:*:*:*
  • OR cpe:/o:hp:sis:*:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:2.4:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:2.5:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:2.5.1:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:sunos:5.6:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:7.0:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:8.0:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9.0:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9.0:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*
  • OR cpe:/o:sun:sunos:-:*:*:*:*:*:*:*
  • OR cpe:/o:sun:sunos:5.4:*:*:*:*:*:*:*
  • OR cpe:/o:sun:sunos:5.5:*:*:*:*:*:*:*
  • OR cpe:/o:sun:sunos:5.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:sun:sunos:5.7:*:*:*:*:*:*:*
  • OR cpe:/o:sun:sunos:5.8:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:hp:hp-ux:10.20:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_pro:8.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.3:*:*:*:*:*:*:*
  • AND
  • cpe:/o:sun:solaris:2.6::sparc:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:10.10:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.00:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.3:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.4:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:8::sparc:*:*:*:*:*
  • OR cpe:/o:redhat:linux:6.2:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.04:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:2.2:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.11:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.1:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5:*:*:*:*:*:*:*
  • OR cpe:/o:conectiva:linux:6.0:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.7:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.2:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:7.1:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.1:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.5:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.6:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.8:*:*:*:*:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:6.5:*:*:*:server:*:*:*
  • OR cpe:/o:suse:suse_linux:7.2:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.3:-:*:*:*:*:*:*
  • OR cpe:/o:conectiva:linux:7.0:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.2:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:7.3:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.4:-:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.9:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.10:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.11:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*
  • OR cpe:/a:suse:suse_linux_firewall:*:*:*:*:*:*:*:*
  • OR cpe:/a:suse:suse_linux_database_server:*:*:*:*:*:*:*:*
  • OR cpe:/a:suse:suse_linux_connectivity_server:*:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.12:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.13:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.14:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/o:conectiva:linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.3:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.5:-:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9::sparc:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:3.0:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.6:-:*:*:*:*:*:*
  • OR cpe:/a:openpkg:openpkg:current:*:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.15:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.16:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.6.1:release_p10:*:*:*:*:*:*
  • OR cpe:/a:suse:suse_linux_office_server:*:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/a:openpkg:openpkg:1.1:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.22:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:8.1:*:*:*:*:*:*:*
  • OR cpe:/o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:current:*:*:*:*:*:*:*
  • OR cpe:/o:turbolinux:turbolinux_server:6.1:*:*:*:*:*:*:*
  • OR cpe:/a:openpkg:openpkg:1.2:*:*:*:*:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:6.0:*:*:*:workstation:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.7:-:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*
  • OR cpe:/o:redhat:linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:8.2:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:aw:*:*:*:*:*
  • OR cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.19:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:7.0::sparc:*:*:*:*:*
  • OR cpe:/o:redhat:linux_advanced_workstation:2.1::itanium:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:8.2::ppc:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:9.1::ppc:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.6.2:-:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.10f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.10m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.11f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.11m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.12f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.12m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.13f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.13m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.14f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.14m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.15f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.15m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.16f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.16m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.17:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.17f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.17m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.18:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.18f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.18m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.2f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.2m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.3f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.3m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.4f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.4m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.5f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.5m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.6f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.6m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.7f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.7m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.8f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.8m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.9f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.9m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5_20:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20030161
    V
    		CVE-2003-0161
    2015-11-16
    oval:org.debian:def:290
    V
    		char-to-int conversion
    2003-04-17
    oval:org.debian:def:278
    V
    		char-to-int conversion
    2003-04-04
    BACK
    sendmail sendmail 2.6
    sendmail sendmail 2.6.1
    sendmail sendmail 2.6.2
    sendmail sendmail 3.0
    sendmail sendmail 3.0.1
    sendmail sendmail 3.0.2
    sendmail sendmail 3.0.3
    sendmail sendmail 8.9.0
    sendmail sendmail 8.9.1
    sendmail sendmail 8.9.2
    sendmail sendmail 8.9.3
    sendmail sendmail 8.10
    sendmail sendmail 8.10.1
    sendmail sendmail 8.10.2
    sendmail sendmail 8.11.0
    sendmail sendmail 8.11.1
    sendmail sendmail 8.11.2
    sendmail sendmail 8.11.3
    sendmail sendmail 8.11.4
    sendmail sendmail 8.11.5
    sendmail sendmail 8.11.6
    sendmail sendmail 8.12 beta10
    sendmail sendmail 8.12 beta12
    sendmail sendmail 8.12 beta16
    sendmail sendmail 8.12 beta5
    sendmail sendmail 8.12 beta7
    sendmail sendmail 8.12.0
    sendmail sendmail 8.12.1
    sendmail sendmail 8.12.2
    sendmail sendmail 8.12.3
    sendmail sendmail 8.12.4
    sendmail sendmail 8.12.5
    sendmail sendmail 8.12.6
    sendmail sendmail 8.12.7
    sendmail sendmail 8.12.8
    sendmail sendmail switch 2.1
    sendmail sendmail switch 2.1.1
    sendmail sendmail switch 2.1.2
    sendmail sendmail switch 2.1.3
    sendmail sendmail switch 2.1.4
    sendmail sendmail switch 2.1.5
    sendmail sendmail switch 2.2
    sendmail sendmail switch 2.2.1
    sendmail sendmail switch 2.2.2
    sendmail sendmail switch 2.2.3
    sendmail sendmail switch 2.2.4
    sendmail sendmail switch 2.2.5
    sendmail sendmail switch 3.0
    sendmail sendmail switch 3.0.1
    sendmail sendmail switch 3.0.2
    sendmail sendmail switch 3.0.3
    compaq tru64 4.0b
    compaq tru64 4.0d
    compaq tru64 4.0d_pk9_bl17
    compaq tru64 4.0f
    compaq tru64 4.0f_pk6_bl17
    compaq tru64 4.0f_pk7_bl18
    compaq tru64 4.0g
    compaq tru64 4.0g_pk3_bl17
    compaq tru64 5.0
    compaq tru64 5.0_pk4_bl17
    compaq tru64 5.0_pk4_bl18
    compaq tru64 5.0a
    compaq tru64 5.0a_pk3_bl17
    compaq tru64 5.0f
    compaq tru64 5.1
    compaq tru64 5.1_pk3_bl17
    compaq tru64 5.1_pk4_bl18
    compaq tru64 5.1_pk5_bl19
    compaq tru64 5.1_pk6_bl20
    compaq tru64 5.1a
    compaq tru64 5.1a_pk1_bl1
    compaq tru64 5.1a_pk2_bl2
    compaq tru64 5.1a_pk3_bl3
    compaq tru64 5.1b
    compaq tru64 5.1b_pk1_bl1
    hp hp-ux 10.00
    hp hp-ux 10.01
    hp hp-ux 10.08
    hp hp-ux 10.09
    hp hp-ux 10.10
    hp hp-ux 10.16
    hp hp-ux 10.20
    hp hp-ux 10.24
    hp hp-ux 10.26
    hp hp-ux 10.30
    hp hp-ux 10.34
    hp hp-ux 11.00
    hp hp-ux 11.0.4
    hp hp-ux 11.11
    hp hp-ux 11.20
    hp hp-ux 11.22
    hp hp-ux series 700 10.20
    hp hp-ux series 800 10.20
    hp sis *
    sun solaris 2.4
    sun solaris 2.5
    sun solaris 2.5.1
    sun solaris 2.5.1
    sun solaris 2.6
    sun solaris 7.0
    sun solaris 8.0
    sun solaris 9.0
    sun solaris 9.0
    sun solaris 9.0 x86_update_2
    sun sunos -
    sun sunos 5.4
    sun sunos 5.5
    sun sunos 5.5.1
    sun sunos 5.7
    sun sunos 5.8
    hp hp-ux 10.20
    sendmail sendmail 8.12.0
    sendmail sendmail 8.12.6
    sendmail sendmail pro 8.9.2
    sendmail sendmail 8.11.1
    sendmail sendmail 8.9.3
    sendmail sendmail 8.12.1
    sendmail sendmail 8.12.2
    sendmail sendmail 8.12.3
    sendmail sendmail 8.12.4
    sendmail sendmail 8.12.5
    sendmail sendmail 8.12.8
    sendmail sendmail 8.12.7
    sendmail sendmail 8.12 beta7
    sendmail sendmail 8.12 beta5
    sendmail sendmail 8.12 beta16
    sendmail sendmail 8.12 beta12
    sendmail sendmail 8.12 beta10
    sendmail sendmail 8.11.6
    sendmail sendmail 8.11.5
    sendmail sendmail 8.11.4
    sendmail sendmail 8.11.3
    sendmail sendmail 8.11.2
    sendmail sendmail 8.11.0
    sendmail sendmail 8.10.2
    sendmail sendmail 8.10.1
    sendmail sendmail 8.9.2
    sendmail sendmail 8.9.1
    sendmail sendmail 8.9.0
    sendmail sendmail 8.10
    sendmail sendmail 2.6
    sendmail sendmail 2.6.1
    sendmail sendmail 2.6.2
    sendmail sendmail 3.0
    sendmail sendmail 3.0.1
    sendmail sendmail 3.0.2
    sendmail sendmail 3.0.3
    sendmail sendmail switch 2.1
    sendmail sendmail switch 2.1.1
    sendmail sendmail switch 2.1.2
    sendmail sendmail switch 2.1.3
    sendmail sendmail switch 2.1.4
    sendmail sendmail switch 2.1.5
    sendmail sendmail switch 2.2
    sendmail sendmail switch 2.2.1
    sendmail sendmail switch 2.2.2
    sendmail sendmail switch 2.2.3
    sendmail sendmail switch 2.2.4
    sendmail sendmail switch 2.2.5
    sendmail sendmail switch 3.0
    sendmail sendmail switch 3.0.1
    sendmail sendmail switch 3.0.2
    sendmail sendmail switch 3.0.3
    sun solaris 2.6
    sgi irix 6.5
    hp hp-ux 10.10
    hp hp-ux 11.00
    sgi irix 6.5.1
    sgi irix 6.5.3
    sgi irix 6.5.4
    sun solaris 8
    redhat linux 6.2
    freebsd freebsd 4.0
    hp hp-ux 11.04
    debian debian linux 2.2
    redhat linux 7
    freebsd freebsd 4.1.1
    hp hp-ux 11.11
    freebsd freebsd 4.1
    netbsd netbsd 1.5
    conectiva linux 6.0
    sgi irix 6.5.7
    freebsd freebsd 4.2
    suse suse linux 7.1
    redhat linux 7.1
    sgi irix 6.5.5
    sgi irix 6.5.6
    sgi irix 6.5.8
    turbolinux turbolinux server 6.5
    suse suse linux 7.2
    freebsd freebsd 4.3
    conectiva linux 7.0
    netbsd netbsd 1.5.1
    redhat linux 7.2
    suse suse linux 7.3
    freebsd freebsd 4.4
    sgi irix 6.5.9
    sgi irix 6.5.10
    sgi irix 6.5.11
    netbsd netbsd 1.5.2
    suse suse linux firewall *
    suse suse linux database server *
    suse suse linux connectivity server *
    sgi irix 6.5.12
    sgi irix 6.5.13
    sgi irix 6.5.14
    mandrakesoft mandrake linux 8.2
    suse suse linux 8.0
    conectiva linux 8.0
    redhat linux 7.3
    freebsd freebsd 4.5
    sun solaris 9
    debian debian linux 3.0
    freebsd freebsd 4.6
    openpkg openpkg current
    gentoo linux *
    sgi irix 6.5.15
    sgi irix 6.5.16
    freebsd freebsd 4.6.1 release_p10
    suse suse linux office server *
    netbsd netbsd 1.5.3
    netbsd netbsd 1.6
    redhat linux 8.0
    openpkg openpkg 1.1
    hp hp-ux 11.22
    mandrakesoft mandrake linux 9.0
    suse suse linux 8.1
    suse linux enterprise server 8
    netbsd netbsd current
    turbolinux turbolinux server 6.1
    openpkg openpkg 1.2
    turbolinux turbolinux workstation 6.0
    freebsd freebsd 4.7
    mandrakesoft mandrake linux corporate server 2.1
    mandrakesoft mandrake linux 9.1
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat linux 9.0
    suse suse linux 8.2
    redhat enterprise linux 2.1
    conectiva linux 9.0
    sgi irix 6.5.19
    sun solaris 7.0
    redhat linux advanced workstation 2.1
    mandrakesoft mandrake linux 8.2
    mandrakesoft mandrake linux 9.1
    freebsd freebsd 4.6.2
    sgi irix 6.5.10f
    sgi irix 6.5.10m
    sgi irix 6.5.11f
    sgi irix 6.5.11m
    sgi irix 6.5.12f
    sgi irix 6.5.12m
    sgi irix 6.5.13f
    sgi irix 6.5.13m
    sgi irix 6.5.14f
    sgi irix 6.5.14m
    sgi irix 6.5.15f
    sgi irix 6.5.15m
    sgi irix 6.5.16f
    sgi irix 6.5.16m
    sgi irix 6.5.17
    sgi irix 6.5.17f
    sgi irix 6.5.17m
    sgi irix 6.5.18
    sgi irix 6.5.18f
    sgi irix 6.5.18m
    sgi irix 6.5.2f
    sgi irix 6.5.2m
    sgi irix 6.5.3f
    sgi irix 6.5.3m
    sgi irix 6.5.4f
    sgi irix 6.5.4m
    sgi irix 6.5.5f
    sgi irix 6.5.5m
    sgi irix 6.5.6f
    sgi irix 6.5.6m
    sgi irix 6.5.7f
    sgi irix 6.5.7m
    sgi irix 6.5.8f
    sgi irix 6.5.8m
    sgi irix 6.5.9f
    sgi irix 6.5.9m
    sgi irix 6.5_20