sendmail: remotely exploitable buffer overflow [LWN.net]

Package(s):

sendmail

CVE #(s):

CAN-2003-0694 CAN-2003-0681

Created:

September 17, 2003

Updated:

November 18, 2003

Description:

Michal Zalewski has reported a buffer overflow in sendmail. This overflow, apparently, may be exploited remotely, but only in certain (non-default) configurations. Sendmail 8.12.10 has the fix.

Alerts:

SCO Group	CSSA-2003-036.0	2003-11-17
SuSE	SuSE-SA:2003:040	2003-09-20
OpenPKG	OpenPKG-SA-2003.041	2003-09-19
Conectiva	CLA-2003:742	2003-09-18
Yellow Dog	YDU-20030917-2	2003-09-17
Immunix	IMNX-2003-7+-021-01	2003-09-17
Mandrake	MDKSA-2003:092	2003-09-17
Debian	DSA-384-1	2003-09-17
Red Hat	RHSA-2003:283-01	2003-09-17
Slackware	SSA:2003-260-02	2003-09-17
Gentoo	200309-13	2003-09-17

(Log in to post comments)