VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Oct 20, 2003· Updated Apr 16, 2026

CVE-2003-0688

CVE-2003-0688

Description

The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.

Affected products

26
  • Sendmail, Inc./Sendmail8 versions
    cpe:2.3:a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*
    • cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*
    • cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*
    • cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*
    • cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*
    • cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*
    • cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*
    • cpe:2.3:a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*
  • Sgi/Irix3 versions
    cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*
    • cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*
    • cpe:2.3:o:sgi:irix:6.5.21:*:*:*:*:*:*:*
  • Red Hat/Sendmail8 versions
    cpe:2.3:a:redhat:sendmail:8.12.5-7:*:i386:*:*:*:*:*+ 7 more
    • cpe:2.3:a:redhat:sendmail:8.12.5-7:*:i386:*:*:*:*:*
    • cpe:2.3:a:redhat:sendmail:8.12.5-7:*:i386_cf:*:*:*:*:*
    • cpe:2.3:a:redhat:sendmail:8.12.5-7:*:i386_dev:*:*:*:*:*
    • cpe:2.3:a:redhat:sendmail:8.12.5-7:*:i386_doc:*:*:*:*:*
    • cpe:2.3:a:redhat:sendmail:8.12.8-4:*:i386:*:*:*:*:*
    • cpe:2.3:a:redhat:sendmail:8.12.8-4:*:i386_cf:*:*:*:*:*
    • cpe:2.3:a:redhat:sendmail:8.12.8-4:*:i386_dev:*:*:*:*:*
    • cpe:2.3:a:redhat:sendmail:8.12.8-4:*:i386_doc:*:*:*:*:*
  • Compaq/Tru642 versions
    cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*
    • cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*
  • FreeBSD/FreeBSD4 versions
    cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*
  • OpenBSD/OpenBSD
    cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.