CVE-2003-0681
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard...
CVE-2003-0681 is a high vulnerability (CVSS 7.5) in Sendmail, published September 17, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.4%, the 97th percentile. Fixed in sendmail 8.12.10-1.
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
Exploit likelihood
What each source reports
NVD Score used
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
- Record
CVE-2003-0681- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
- Record
CVE-2003-0681- Updated
- 2026-11-02
EUVDEUVD-2003-0672 No score
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
- Record
EUVD-2003-0672- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3jjj-qxx6-gqmg No score
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard...
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
- Record
GHSA-3jjj-qxx6-gqmg- Updated
- 2026-11-02
OSV No score
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
- Record
CVE-2003-0681- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0681 No score
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
- Record
DEBIAN-CVE-2003-0681- Updated
- 2026-11-02
Affected products
- sendmail
- sendmail advanced message server
- sendmail pro
- sendmail switch
- apple mac os x
- apple mac os x server
- gentoo linux
- hp hp-ux
- ibm aix
- netbsd
- openbsd
- turbolinux advanced server
Show 2 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sendmailDebian:12 |
before 8.12.10-1 | 8.12.10-1 |
sendmailDebian:13 |
before 8.12.10-1 | 8.12.10-1 |
sendmailDebian:14 |
before 8.12.10-1 | 8.12.10-1 |
sendmailDebian:3.0 |
before 8.12.3-6.6 | 8.12.3-6.6 |
sendmail-wideDebian:3.0 |
before 8.12.3+3.5Wbeta-5.5 | 8.12.3+3.5Wbeta-5.5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Sendmail 8.12.9 - 'Prescan()' Variant Remote Buffer Overrun | 2003-09-17 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
marc.info?l=bugtraq&m=106398718909274&w=2
sendmail.org/8.12.10.html
redhat.com/support/errata/RHSA-2003-283.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A595
mandriva.com/security/advisories?name=MDKSA-2003:092
Show 9 moreShow less
kb.cert.org/vuls/id/108964
debian.org/security/2003/dsa-384
exchange.xforce.ibmcloud.com/vulnerabilities/13216
securityfocus.com/bid/8649
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000742
nvd.nist.gov/vuln/detail/CVE-2003-0681
github.com/advisories/GHSA-3jjj-qxx6-gqmg
security-tracker.debian.org/tracker/CVE-2003-0681