CVE-2003-0688
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- compaq:tru64
- freebsd:freebsd
- openbsd:openbsd
- redhat:sendmail
- sendmail:sendmail
- sgi:irix
References
- ftp://patches.sgi.com/support/free/security/advisories/20030803-01-P
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000727
- http://www.kb.cert.org/vuls/id/993452
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:086
- http://www.novell.com/linux/security/advisories/2003_035_sendmail.html