What’s Vulnerable › Vulnerabilities

CVE-2003-0681

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 22.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-10-06 · updated 2026-06-16

Description

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

Affected products

• macOS: 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5 (+1)
• Apple Mac Os X Server: 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5 (+1)
• gentoo Linux: 0.5, 0.7, 1.1a, 1.2, 1.4-rc1, 1.4-rc2 (+1)
• Hewlett Packard Enterprise (HPE) HP-UX: 11.00, 11.0.4, 11.11, 11.22
• IBM AIX: 4.3.3, 5.1, 5.2
• Netbsd: 1.4.3, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6 (+2)
• OpenBSD: 3.2, 3.3
• Sendmail Advanced Message Server: 1.2, 1.3
• Sendmail: 2.6, 2.6.1, 2.6.2, 3.0, 3.0.1, 3.0.2 (+31)
• Sendmail Pro: 8.9.2, 8.9.3
• Sendmail Switch: 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5 (+10)
• Turbolinux Advanced Server: 6.0
• Turbolinux Server: 6.1, 6.5, 7.0, 8.0
• Turbolinux Workstation: 6.0, 7.0, 8.0

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000742
• http://marc.info/?l=bugtraq&m=106383437615742&w=2
• http://marc.info/?l=bugtraq&m=106398718909274&w=2
• http://www.debian.org/security/2003/dsa-384
• http://www.kb.cert.org/vuls/id/108964
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:092
• http://www.redhat.com/support/errata/RHSA-2003-283.html
• http://www.securityfocus.com/bid/8649
• http://www.sendmail.org/8.12.10.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13216
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3606
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A595

Get alerted when CVE-2003-0681 or the next vulnerability affects your stack