CVE-2003-0694
EXPLOITEDSendmail Advanced Message Server - Remote Code Execution via Prescan Buffer Overflow
Title source: llmExploitation Summary
CVE-2003-0694 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 1 public exploit from researchers including aushack, including a Metasploit module auxiliary/dos/smtp/sendmail_prescan.
AI-analyzed exploit summary This is a proof-of-concept denial-of-service exploit for Sendmail versions 8.12.8 and earlier, targeting a memory corruption vulnerability in the prescan() method during SMTP header parsing. The exploit sends a maliciously crafted RCPT TO command to trigger a segmentation fault.
Description
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Exploits (1)
This is a proof-of-concept denial-of-service exploit for Sendmail versions 8.12.8 and earlier, targeting a memory corruption vulnerability in the prescan() method during SMTP header parsing. The exploit sends a maliciously crafted RCPT TO command to trigger a segmentation fault.