Vulnerability Name:

CVE-2003-0694 (CCN-13204)

Assigned:2003-09-17
Published:2003-09-17
Updated:2018-10-30
Summary:The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
CVSS v3 Severity:10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: SCO Security Advisory CSSA-2003-036.0
OpenLinux: Sendmail prescan remotely exploitable vulnerability

Source: SCO
Type: UNKNOWN
SCOSA-2004.11

Source: CCN
Type: SGI Security Advisory 20031001-01-U
SGI Advanced Linux Environment security update #2

Source: CCN
Type: Full-Disclosure Mailing List, Wed Sep 17 2003 - 04:19:46 CDT
Sendmail 8.12.9 prescan bug (a new one) [CAN-2003-0694]

Source: FULLDISC
Type: UNKNOWN
20030917 Sendmail 8.12.9 prescan bug (a new one) [CAN-2003-0694]

Source: VULNWATCH
Type: UNKNOWN
20030917 Zalewski Advisory - Sendmail 8.12.9 prescan bug

Source: MITRE
Type: CNA
CVE-2003-0694

Source: CONECTIVA
Type: UNKNOWN
CLA-2003:742

Source: CCN
Type: Conectiva Linux Security Announcement CLSA-2003:742
sendmail

Source: CCN
Type: AppleCare Knowledge Base Document 61798
Security Update 2003-08-14

Source: BUGTRAQ
Type: UNKNOWN
20030917 Sendmail 8.12.9 prescan bug (a new one) [CAN-2003-0694]

Source: BUGTRAQ
Type: UNKNOWN
20030917 [slackware-security] Sendmail vulnerabilities fixed (SSA:2003-260-02)

Source: BUGTRAQ
Type: UNKNOWN
20030917 GLSA: sendmail (200309-13)

Source: BUGTRAQ
Type: UNKNOWN
20030919 [OpenPKG-SA-2003.041] OpenPKG Security Advisory (sendmail)

Source: CCN
Type: RHSA-2003-283
Updated Sendmail packages fix vulnerability.

Source: CCN
Type: RHSA-2003-284
sendmail security update

Source: CCN
Type: Sun Alert ID: 56860
sendmail(1M) Buffer Overflow Vulnerability in Address Parsing Function prescan( )

Source: CCN
Type: CERT Advisory CA-2003-25
Buffer Overflow in Sendmail

Source: CERT
Type: Patch, Third Party Advisory, US Government Resource
CA-2003-25

Source: CCN
Type: CIAC Information Bulletin N-149
Sendmail 8.12.9 Prescan Bug

Source: DEBIAN
Type: UNKNOWN
DSA-384

Source: DEBIAN
Type: DSA-384
sendmail -- buffer overflows

Source: CCN
Type: US-CERT VU#784980
Sendmail prescan() buffer overflow vulnerability

Source: CERT-VN
Type: US Government Resource
VU#784980

Source: CCN
Type: slackware-security Mailing List, Wed Sep 17 10:10:26 PDT 2003
Sendmail vulnerabilities fixed (SSA:2003-260-02)

Source: CCN
Type: Gentoo Linux Security Announcement 200309-13
sendmail

Source: CCN
Type: Immunix Secured OS Security Advisory IMNX-2003-7+-021-01
sendmail

Source: CCN
Type: SCO Security Advisory SCOSA-2004.11
OpenServer 5.0.6 OpenServer 5.0.7 : Multiple Vulnerabilities in Sendmail

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2003:092

Source: CCN
Type: OpenPKG-SA-2003.041
Sendmail

Source: REDHAT
Type: UNKNOWN
RHSA-2003:283

Source: REDHAT
Type: UNKNOWN
RHSA-2003:284

Source: CCN
Type: BID-8641
Sendmail Prescan() Variant Remote Buffer Overrun Vulnerability

Source: CCN
Type: Sendmail Web site
Sendmail 8.12.10

Source: CONFIRM
Type: Patch
http://www.sendmail.org/8.12.10.html

Source: CCN
Type: TLSA-2003-52
Buffer overflows

Source: XF
Type: UNKNOWN
sendmail-prescan-bo(13204)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:2975

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:572

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:603

Source: CCN
Type: IBM SECURITY ADVISORY
sendmail buffer overflow vulnerability.

Source: SUSE
Type: SUSE-SA:2003:040
sendmail sendmail-tls: local/remote privilege escalation

Vulnerable Configuration:Configuration 1:
  • cpe:/a:sendmail:advanced_message_server:1.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:advanced_message_server:1.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.8.8:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.9:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_pro:8.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_pro:8.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.3:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.15:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.16:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.17f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.17m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.18f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.18m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.19f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.19m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.20f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.20m:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.21f:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.21m:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:apple:mac_os_x:10.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0f:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0f_pk6_bl17:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0f_pk7_bl18:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0f_pk8_bl22:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0g:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0g_pk3_bl17:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0g_pk4_bl22:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1_pk3_bl17:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1_pk4_bl18:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1_pk5_bl19:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1_pk6_bl20:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a_pk1_bl1:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a_pk2_bl2:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a_pk3_bl3:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a_pk4_bl21:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a_pk5_bl23:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1b:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1b_pk1_bl1:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1b_pk2_bl22:*:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:0.5:*:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:0.7:*:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:1.1a:*:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:1.2:*:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:1.4:rc1:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:1.4:rc2:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:1.4:rc3:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.00:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.11:*:*:*:*:*:*:*
  • OR cpe:/o:hp:hp-ux:11.22:*:*:*:*:*:*:*
  • OR cpe:/o:ibm:aix:4.3.3:*:*:*:*:*:*:*
  • OR cpe:/o:ibm:aix:5.1:*:*:*:*:*:*:*
  • OR cpe:/o:ibm:aix:5.2:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5:*:sh3:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5:*:x86:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.6:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*
  • OR cpe:/o:sun:sunos:5.6:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:7.0:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:8.0:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9.0:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9.0:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:sunos:-:*:*:*:*:*:*:*
  • OR cpe:/o:sun:sunos:5.7:*:*:*:*:*:*:*
  • OR cpe:/o:sun:sunos:5.8:*:*:*:*:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:6.0:*:advanced:*:server:*:*:*
  • OR cpe:/o:turbolinux:turbolinux_server:6.1:*:*:*:*:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:6.5:*:*:*:server:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:7.0:*:*:*:server:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:8.0:*:*:*:server:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:6.0:*:*:*:workstation:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:7.0:*:*:*:workstation:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:8.0:*:*:*:workstation:*:*:*

    • Configuration CCN 1:
  • cpe:/a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.9:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.8.8:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:8.10:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:2.6.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail:3.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:advanced_message_server:1.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:advanced_message_server:1.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_pro:8.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_pro:8.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:2.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sendmail:sendmail_switch:3.0.3:*:*:*:*:*:*:*
  • AND
  • cpe:/o:freebsd:freebsd:*:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0f:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:8::sparc:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:4.0g:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.1:*:*:*:*:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:6.5:*:*:*:server:*:*:*
  • OR cpe:/o:suse:suse_linux:7.2:*:*:*:*:*:*:*
  • OR cpe:/o:conectiva:linux:7.0:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1a:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.2:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:7.3:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*
  • OR cpe:/a:suse:suse_linux_firewall:*:*:*:*:*:*:*:*
  • OR cpe:/a:suse:suse_linux_database_server:*:*:*:*:*:*:*:*
  • OR cpe:/a:suse:suse_linux_connectivity_server:*:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/o:conectiva:linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.3:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9::sparc:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:3.0:*:*:*:*:*:*:*
  • OR cpe:/o:slackware:slackware_linux:8.1:*:*:*:*:*:*:*
  • OR cpe:/a:openpkg:openpkg:current:*:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/a:suse:suse_linux_office_server:*:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:8.1:*:*:*:*:*:*:*
  • OR cpe:/o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:current:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.0:*:*:*:*:*:*:*
  • OR cpe:/o:slackware:slackware_linux:current:*:*:*:*:*:*:*
  • OR cpe:/o:turbolinux:turbolinux_server:6.1:*:*:*:*:*:*:*
  • OR cpe:/a:openpkg:openpkg:1.2:*:*:*:*:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:6.0:*:*:*:workstation:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*
  • OR cpe:/o:compaq:tru64:5.1b:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*
  • OR cpe:/o:redhat:linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:8.2:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:aw:*:*:*:*:*
  • OR cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:openpkg:openpkg:1.3:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:7.0::sparc:*:*:*:*:*
  • OR cpe:/o:redhat:linux_advanced_workstation:2.1::itanium:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:8.2::ppc:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:9.1::ppc:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20030694
    V
    		CVE-2003-0694
    2015-11-16
    oval:org.mitre.oval:def:572
    V
    		Sendmail BO in Prescan Function
    2010-09-20
    oval:org.mitre.oval:def:603
    V
    		Sendmail BO in prescan Function
    2010-09-20
    oval:org.mitre.oval:def:2975
    V
    		Sendmail prescan function Buffer Overflow
    2005-02-23
    oval:org.debian:def:384
    V
    		buffer overflows
    2003-09-17
    BACK
    sendmail advanced message server 1.2
    sendmail advanced message server 1.3
    sendmail sendmail 2.6
    sendmail sendmail 2.6.1
    sendmail sendmail 2.6.2
    sendmail sendmail 3.0
    sendmail sendmail 3.0.1
    sendmail sendmail 3.0.2
    sendmail sendmail 3.0.3
    sendmail sendmail 8.8.8
    sendmail sendmail 8.9.0
    sendmail sendmail 8.9.1
    sendmail sendmail 8.9.2
    sendmail sendmail 8.9.3
    sendmail sendmail 8.10
    sendmail sendmail 8.10.1
    sendmail sendmail 8.10.2
    sendmail sendmail 8.11.0
    sendmail sendmail 8.11.1
    sendmail sendmail 8.11.2
    sendmail sendmail 8.11.3
    sendmail sendmail 8.11.4
    sendmail sendmail 8.11.5
    sendmail sendmail 8.11.6
    sendmail sendmail 8.12 beta10
    sendmail sendmail 8.12 beta12
    sendmail sendmail 8.12 beta16
    sendmail sendmail 8.12 beta5
    sendmail sendmail 8.12 beta7
    sendmail sendmail 8.12.0
    sendmail sendmail 8.12.1
    sendmail sendmail 8.12.2
    sendmail sendmail 8.12.3
    sendmail sendmail 8.12.4
    sendmail sendmail 8.12.5
    sendmail sendmail 8.12.6
    sendmail sendmail 8.12.7
    sendmail sendmail 8.12.8
    sendmail sendmail 8.12.9
    sendmail sendmail pro 8.9.2
    sendmail sendmail pro 8.9.3
    sendmail sendmail switch 2.1
    sendmail sendmail switch 2.1.1
    sendmail sendmail switch 2.1.2
    sendmail sendmail switch 2.1.3
    sendmail sendmail switch 2.1.4
    sendmail sendmail switch 2.1.5
    sendmail sendmail switch 2.2
    sendmail sendmail switch 2.2.1
    sendmail sendmail switch 2.2.2
    sendmail sendmail switch 2.2.3
    sendmail sendmail switch 2.2.4
    sendmail sendmail switch 2.2.5
    sendmail sendmail switch 3.0
    sendmail sendmail switch 3.0.1
    sendmail sendmail switch 3.0.2
    sendmail sendmail switch 3.0.3
    sgi irix 6.5.15
    sgi irix 6.5.16
    sgi irix 6.5.17f
    sgi irix 6.5.17m
    sgi irix 6.5.18f
    sgi irix 6.5.18m
    sgi irix 6.5.19f
    sgi irix 6.5.19m
    sgi irix 6.5.20f
    sgi irix 6.5.20m
    sgi irix 6.5.21f
    sgi irix 6.5.21m
    apple mac os x 10.2
    apple mac os x 10.2.1
    apple mac os x 10.2.2
    apple mac os x 10.2.3
    apple mac os x 10.2.4
    apple mac os x 10.2.5
    apple mac os x 10.2.6
    apple mac os x server 10.2
    apple mac os x server 10.2.1
    apple mac os x server 10.2.2
    apple mac os x server 10.2.3
    apple mac os x server 10.2.4
    apple mac os x server 10.2.5
    apple mac os x server 10.2.6
    compaq tru64 4.0f
    compaq tru64 4.0f_pk6_bl17
    compaq tru64 4.0f_pk7_bl18
    compaq tru64 4.0f_pk8_bl22
    compaq tru64 4.0g
    compaq tru64 4.0g_pk3_bl17
    compaq tru64 4.0g_pk4_bl22
    compaq tru64 5.1
    compaq tru64 5.1_pk3_bl17
    compaq tru64 5.1_pk4_bl18
    compaq tru64 5.1_pk5_bl19
    compaq tru64 5.1_pk6_bl20
    compaq tru64 5.1a
    compaq tru64 5.1a_pk1_bl1
    compaq tru64 5.1a_pk2_bl2
    compaq tru64 5.1a_pk3_bl3
    compaq tru64 5.1a_pk4_bl21
    compaq tru64 5.1a_pk5_bl23
    compaq tru64 5.1b
    compaq tru64 5.1b_pk1_bl1
    compaq tru64 5.1b_pk2_bl22
    freebsd freebsd 3.0 releng
    freebsd freebsd 4.0 releng
    freebsd freebsd 4.3 release_p38
    freebsd freebsd 4.3 releng
    freebsd freebsd 4.4 release_p42
    freebsd freebsd 4.4 releng
    freebsd freebsd 4.5 release_p32
    freebsd freebsd 4.5 releng
    freebsd freebsd 4.6 release_p20
    freebsd freebsd 4.6 releng
    freebsd freebsd 4.7 release_p17
    freebsd freebsd 4.7 releng
    freebsd freebsd 4.8 release_p6
    freebsd freebsd 4.8 releng
    freebsd freebsd 4.9 pre-release
    freebsd freebsd 5.0 release_p14
    freebsd freebsd 5.0 releng
    freebsd freebsd 5.1 release_p5
    freebsd freebsd 5.1 releng
    gentoo linux 0.5
    gentoo linux 0.7
    gentoo linux 1.1a
    gentoo linux 1.2
    gentoo linux 1.4 rc1
    gentoo linux 1.4 rc2
    gentoo linux 1.4 rc3
    hp hp-ux 11.00
    hp hp-ux 11.0.4
    hp hp-ux 11.11
    hp hp-ux 11.22
    ibm aix 4.3.3
    ibm aix 5.1
    ibm aix 5.2
    netbsd netbsd 1.4.3
    netbsd netbsd 1.5
    netbsd netbsd 1.5
    netbsd netbsd 1.5
    netbsd netbsd 1.5.1
    netbsd netbsd 1.5.2
    netbsd netbsd 1.5.3
    netbsd netbsd 1.6
    netbsd netbsd 1.6 beta
    netbsd netbsd 1.6.1
    sun solaris 2.6
    sun solaris 7.0
    sun solaris 8.0
    sun solaris 9.0
    sun solaris 9.0
    sun sunos -
    sun sunos 5.7
    sun sunos 5.8
    turbolinux turbolinux advanced server 6.0
    turbolinux turbolinux server 6.1
    turbolinux turbolinux server 6.5
    turbolinux turbolinux server 7.0
    turbolinux turbolinux server 8.0
    turbolinux turbolinux workstation 6.0
    turbolinux turbolinux workstation 7.0
    turbolinux turbolinux workstation 8.0
    sendmail sendmail 8.12.0
    sendmail sendmail 8.12.6
    sendmail sendmail 8.11.1
    sendmail sendmail 8.9.3
    sendmail sendmail 8.12.1
    sendmail sendmail 8.12.2
    sendmail sendmail 8.12.3
    sendmail sendmail 8.12.4
    sendmail sendmail 8.12.5
    sendmail sendmail 8.12.9
    sendmail sendmail 8.12.8
    sendmail sendmail 8.12.7
    sendmail sendmail 8.12 beta7
    sendmail sendmail 8.12 beta5
    sendmail sendmail 8.12 beta16
    sendmail sendmail 8.12 beta12
    sendmail sendmail 8.12 beta10
    sendmail sendmail 8.11.6
    sendmail sendmail 8.11.5
    sendmail sendmail 8.11.4
    sendmail sendmail 8.11.3
    sendmail sendmail 8.11.2
    sendmail sendmail 8.11.0
    sendmail sendmail 8.10.2
    sendmail sendmail 8.10.1
    sendmail sendmail 8.9.2
    sendmail sendmail 8.9.1
    sendmail sendmail 8.9.0
    sendmail sendmail 8.8.8
    sendmail sendmail 8.10
    sendmail sendmail 2.6
    sendmail sendmail 2.6.1
    sendmail sendmail 2.6.2
    sendmail sendmail 3.0
    sendmail sendmail 3.0.1
    sendmail sendmail 3.0.2
    sendmail sendmail 3.0.3
    sendmail advanced message server 1.2
    sendmail advanced message server 1.3
    sendmail sendmail pro 8.9.2
    sendmail sendmail pro 8.9.3
    sendmail sendmail switch 2.1
    sendmail sendmail switch 2.1.1
    sendmail sendmail switch 2.1.2
    sendmail sendmail switch 2.1.3
    sendmail sendmail switch 2.1.4
    sendmail sendmail switch 2.1.5
    sendmail sendmail switch 2.2
    sendmail sendmail switch 2.2.1
    sendmail sendmail switch 2.2.2
    sendmail sendmail switch 2.2.3
    sendmail sendmail switch 2.2.4
    sendmail sendmail switch 2.2.5
    sendmail sendmail switch 3.0
    sendmail sendmail switch 3.0.1
    sendmail sendmail switch 3.0.2
    sendmail sendmail switch 3.0.3
    freebsd freebsd *
    compaq tru64 4.0f
    sun solaris 8
    redhat linux 7
    netbsd netbsd 1.5
    compaq tru64 4.0g
    redhat linux 7.1
    turbolinux turbolinux server 6.5
    suse suse linux 7.2
    conectiva linux 7.0
    netbsd netbsd 1.5.1
    compaq tru64 5.1
    compaq tru64 5.1a
    redhat linux 7.2
    suse suse linux 7.3
    netbsd netbsd 1.5.2
    suse suse linux firewall *
    suse suse linux database server *
    suse suse linux connectivity server *
    mandrakesoft mandrake linux 8.2
    suse suse linux 8.0
    conectiva linux 8.0
    redhat linux 7.3
    sun solaris 9
    debian debian linux 3.0
    slackware slackware linux 8.1
    openpkg openpkg current
    gentoo linux *
    suse suse linux office server *
    netbsd netbsd 1.5.3
    netbsd netbsd 1.6
    redhat linux 8.0
    mandrakesoft mandrake linux 9.0
    suse suse linux 8.1
    suse linux enterprise server 8
    netbsd netbsd current
    netbsd netbsd 1.0
    slackware slackware linux current
    turbolinux turbolinux server 6.1
    openpkg openpkg 1.2
    turbolinux turbolinux workstation 6.0
    mandrakesoft mandrake linux corporate server 2.1
    compaq tru64 5.1b
    mandrakesoft mandrake linux 9.1
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat linux 9.0
    slackware slackware linux 9.0
    suse suse linux 8.2
    redhat enterprise linux 2.1
    conectiva linux 9.0
    netbsd netbsd 1.6.1
    openpkg openpkg 1.3
    sun solaris 7.0
    redhat linux advanced workstation 2.1
    mandrakesoft mandrake linux 8.2
    mandrakesoft mandrake linux 9.1
    mandrakesoft mandrake linux corporate server 2.1