CVE-2003-0308
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files,...
CVE-2003-0308 is a high vulnerability (CVSS 7.2) in Debian Linux, published May 15, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in sendmail 8.12.9-2.
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
Exploit likelihood
What each source reports
NVD Score used
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
- Record
CVE-2003-0308- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
- Record
CVE-2003-0308- Updated
- 2026-11-02
EUVDEUVD-2003-0303 No score
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
- Record
EUVD-2003-0303- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c936-pgj9-534q No score
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files,...
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
- Record
GHSA-c936-pgj9-534q- Updated
- 2026-11-02
OSV No score
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
- Record
CVE-2003-0308- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0308 No score
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
- Record
DEBIAN-CVE-2003-0308- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
debian.org/security/2003/dsa-305
openwall.com/lists/oss-security/2008/10/30/2
dev.gentoo.org/~rbu/security/debiantemp/sendmail-base
bugs.debian.org/496408
bugs.gentoo.org/show_bug.cgi?id=235770
nvd.nist.gov/vuln/detail/CVE-2003-0308
github.com/advisories/GHSA-c936-pgj9-534q
security-tracker.debian.org/tracker/CVE-2003-0308