CVE-2003-0694observed exploitation

CVE-2003-0694

Published · Updated

Follow this CVE+ Monitor sendmail

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

52Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 66%
from disclosure to weaponsame day
Published on NVDSep 18
metasploitSep 17
VulnCheck+5024d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
9 products
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 · Red Hat Enterprise Linux ES version 2.1 · Red Hat Enterprise Linux WS version 2.1 · Red Hat Linux 7.1 · Red Hat Linux 7.2 · and others 4
fix ↗
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Affected products
n/a · n/a