CVE-2003-0694
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via...
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Exploit likelihood
What each source reports
NVD Score used
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
- Record
CVE-2003-0694- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
- Record
CVE-2003-0694- Updated
- 2026-11-02
EUVDEUVD-2003-0685 No score
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
- Record
EUVD-2003-0685- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9g2f-xcj6-7657 No score
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via...
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
- Record
GHSA-9g2f-xcj6-7657- Updated
- 2026-11-02
OSV No score
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
- Record
CVE-2003-0694- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0694 No score
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
- Record
DEBIAN-CVE-2003-0694- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sendmailDebian:12 |
before 8.12.10-1 | 8.12.10-1 |
sendmailDebian:13 |
before 8.12.10-1 | 8.12.10-1 |
sendmailDebian:14 |
before 8.12.10-1 | 8.12.10-1 |
sendmailDebian:3.0 |
before 8.12.3-6.6 | 8.12.3-6.6 |
sendmail-wideDebian:3.0 |
before 8.12.3+3.5Wbeta-5.5 | 8.12.3+3.5Wbeta-5.5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Sendmail SMTP Address prescan Memory Corruption | 2003-09-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0694 is a high vulnerability (CVSS 10.0) in Sendmail, published September 17, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 66.2%, the 99th percentile. Fixed in sendmail 8.12.10-1.
References
marc.info?l=bugtraq&m=106398718909274&w=2
sendmail.org/8.12.10.html
redhat.com/support/errata/RHSA-2003-283.html
archives.neohapsis.com/archives/fulldisclosure/2003-q3/4119.html
cert.org/advisories/CA-2003-25.html
kb.cert.org/vuls/id/784980
Show 14 moreShow less
mandriva.com/security/advisories?name=MDKSA-2003:092
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A603
debian.org/security/2003/dsa-384
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000742
nvd.nist.gov/vuln/detail/CVE-2003-0694
github.com/advisories/GHSA-9g2f-xcj6-7657
security-tracker.debian.org/tracker/CVE-2003-0694