Read the docs
TI-2003-00154 Aliases CVE-2003-0161GHSA-2259-4w76-9w2p

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does…

Priority HIGH 70Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.

Why it matters now

EPSS 0.38786 98th percentileScored 2026-11-07
Fix Fixed Red Hat: 3 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 111

CPEVersionsRoleVendor
cpe:2.3:a:sendmail:sendmail:2.6:*:*:*:*:*:*:*2.6VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:2.6.1:*:*:*:*:*:*:*2.6.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:2.6.2:*:*:*:*:*:*:*2.6.2VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:3.0:*:*:*:*:*:*:*3.0VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*8.9.0VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*8.9.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*8.9.2VulnerableSendmail
  • cpe:2.3:a:sendmail:sendmail:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:2.6.1:*:*:*:*:*:*:* Versions 2.6.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:2.6.2:*:*:*:*:*:*:* Versions 2.6.2 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:* Versions 8.9.0 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:* Versions 8.9.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:* Versions 8.9.2 Vulnerable ·Sendmail
Show 101 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*8.9.3VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:*8.10VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*8.10.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*8.10.2VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*8.11.0VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*8.11.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*8.11.2VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*8.11.3VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*8.11.4VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*8.11.5VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*8.11.6VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*8.12 beta10VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*8.12 beta12VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*8.12 beta16VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*8.12 beta5VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*8.12 beta7VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*8.12.0VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*8.12.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*8.12.2VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*8.12.3VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*8.12.4VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*8.12.5VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*8.12.6VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*8.12.7VulnerableSendmail
cpe:2.3:a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*8.12.8VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.1:*:*:*:*:*:*:*2.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.1.1:*:*:*:*:*:*:*2.1.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.1.2:*:*:*:*:*:*:*2.1.2VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.1.3:*:*:*:*:*:*:*2.1.3VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.1.4:*:*:*:*:*:*:*2.1.4VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.1.5:*:*:*:*:*:*:*2.1.5VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.2:*:*:*:*:*:*:*2.2VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.2.1:*:*:*:*:*:*:*2.2.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.2.2:*:*:*:*:*:*:*2.2.2VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.2.3:*:*:*:*:*:*:*2.2.3VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.2.4:*:*:*:*:*:*:*2.2.4VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:2.2.5:*:*:*:*:*:*:*2.2.5VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:3.0:*:*:*:*:*:*:*3.0VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableSendmail
cpe:2.3:a:sendmail:sendmail_switch:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableSendmail
cpe:2.3:o:compaq:tru64:4.0b:*:*:*:*:*:*:*4.0bVulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0d:*:*:*:*:*:*:*4.0dVulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0d_pk9_bl17:*:*:*:*:*:*:*4.0d_pk9_bl17VulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*4.0fVulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0f_pk6_bl17:*:*:*:*:*:*:*4.0f_pk6_bl17VulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0f_pk7_bl18:*:*:*:*:*:*:*4.0f_pk7_bl18VulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*4.0gVulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0g_pk3_bl17:*:*:*:*:*:*:*4.0g_pk3_bl17VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.0:*:*:*:*:*:*:*5.0VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.0_pk4_bl17:*:*:*:*:*:*:*5.0_pk4_bl17VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.0_pk4_bl18:*:*:*:*:*:*:*5.0_pk4_bl18VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*5.0aVulnerableCompaq
cpe:2.3:o:compaq:tru64:5.0a_pk3_bl17:*:*:*:*:*:*:*5.0a_pk3_bl17VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.0f:*:*:*:*:*:*:*5.0fVulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*5.1VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1_pk3_bl17:*:*:*:*:*:*:*5.1_pk3_bl17VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1_pk4_bl18:*:*:*:*:*:*:*5.1_pk4_bl18VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1_pk5_bl19:*:*:*:*:*:*:*5.1_pk5_bl19VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1_pk6_bl20:*:*:*:*:*:*:*5.1_pk6_bl20VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*5.1aVulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a_pk1_bl1:*:*:*:*:*:*:*5.1a_pk1_bl1VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a_pk2_bl2:*:*:*:*:*:*:*5.1a_pk2_bl2VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a_pk3_bl3:*:*:*:*:*:*:*5.1a_pk3_bl3VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1b:*:*:*:*:*:*:*5.1bVulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1b_pk1_bl1:*:*:*:*:*:*:*5.1b_pk1_bl1VulnerableCompaq
cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*10.00VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*10.01VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:*10.08VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.09:*:*:*:*:*:*:*10.09VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*10.10VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*10.16VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*10.20VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*10.24VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.26:*:*:*:*:*:*:*10.26VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*10.30VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:*10.34VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*11.00VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*11.0.4VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*11.11VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.20:*:*:*:*:*:*:*11.20VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*11.22VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux_series_700:10.20:*:*:*:*:*:*:*10.20VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux_series_800:10.20:*:*:*:*:*:*:*10.20VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:sis:*:*:*:*:*:*:*:*all versionsVulnerableHewlett Packard Enterprise
cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*2.4VulnerableSun
cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*2.5VulnerableSun
cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*2.5.1VulnerableSun
cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*2.5.1VulnerableSun
cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*2.6VulnerableSun
cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*7.0VulnerableSun
cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*8.0VulnerableSun
cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*9.0VulnerableSun
cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*9.0VulnerableSun
cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*9.0 x86_update_2VulnerableSun
cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*not specified by NVDVulnerableSun
cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*5.4VulnerableSun
cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*5.5VulnerableSun
cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*5.5.1VulnerableSun
cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*5.7VulnerableSun
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*5.8VulnerableSun
  • cpe:2.3:a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:* Versions 8.9.3 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:* Versions 8.10 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:* Versions 8.10.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:* Versions 8.10.2 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:* Versions 8.11.0 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:* Versions 8.11.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:* Versions 8.11.2 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:* Versions 8.11.3 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:* Versions 8.11.4 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:* Versions 8.11.5 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:* Versions 8.11.6 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:* Versions 8.12 beta10 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:* Versions 8.12 beta12 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:* Versions 8.12 beta16 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:* Versions 8.12 beta5 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:* Versions 8.12 beta7 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:* Versions 8.12.0 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:* Versions 8.12.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:* Versions 8.12.2 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:* Versions 8.12.3 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:* Versions 8.12.4 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:* Versions 8.12.5 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:* Versions 8.12.6 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:* Versions 8.12.7 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:* Versions 8.12.8 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.1.4:*:*:*:*:*:*:* Versions 2.1.4 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.1.5:*:*:*:*:*:*:* Versions 2.1.5 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Sendmail
  • cpe:2.3:a:sendmail:sendmail_switch:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Sendmail
  • cpe:2.3:o:compaq:tru64:4.0b:*:*:*:*:*:*:* Versions 4.0b Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0d:*:*:*:*:*:*:* Versions 4.0d Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0d_pk9_bl17:*:*:*:*:*:*:* Versions 4.0d_pk9_bl17 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:* Versions 4.0f Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0f_pk6_bl17:*:*:*:*:*:*:* Versions 4.0f_pk6_bl17 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0f_pk7_bl18:*:*:*:*:*:*:* Versions 4.0f_pk7_bl18 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:* Versions 4.0g Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0g_pk3_bl17:*:*:*:*:*:*:* Versions 4.0g_pk3_bl17 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.0_pk4_bl17:*:*:*:*:*:*:* Versions 5.0_pk4_bl17 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.0_pk4_bl18:*:*:*:*:*:*:* Versions 5.0_pk4_bl18 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:* Versions 5.0a Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.0a_pk3_bl17:*:*:*:*:*:*:* Versions 5.0a_pk3_bl17 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.0f:*:*:*:*:*:*:* Versions 5.0f Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1_pk3_bl17:*:*:*:*:*:*:* Versions 5.1_pk3_bl17 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1_pk4_bl18:*:*:*:*:*:*:* Versions 5.1_pk4_bl18 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1_pk5_bl19:*:*:*:*:*:*:* Versions 5.1_pk5_bl19 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1_pk6_bl20:*:*:*:*:*:*:* Versions 5.1_pk6_bl20 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:* Versions 5.1a Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a_pk1_bl1:*:*:*:*:*:*:* Versions 5.1a_pk1_bl1 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a_pk2_bl2:*:*:*:*:*:*:* Versions 5.1a_pk2_bl2 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a_pk3_bl3:*:*:*:*:*:*:* Versions 5.1a_pk3_bl3 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1b:*:*:*:*:*:*:* Versions 5.1b Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1b_pk1_bl1:*:*:*:*:*:*:* Versions 5.1b_pk1_bl1 Vulnerable ·Compaq
  • cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:* Versions 10.00 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:* Versions 10.01 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:* Versions 10.08 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.09:*:*:*:*:*:*:* Versions 10.09 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:* Versions 10.10 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:* Versions 10.16 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:* Versions 10.20 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:* Versions 10.24 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.26:*:*:*:*:*:*:* Versions 10.26 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:* Versions 10.30 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:* Versions 10.34 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:* Versions 11.00 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:* Versions 11.0.4 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:* Versions 11.11 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:11.20:*:*:*:*:*:*:* Versions 11.20 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:* Versions 11.22 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux_series_700:10.20:*:*:*:*:*:*:* Versions 10.20 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux_series_800:10.20:*:*:*:*:*:*:* Versions 10.20 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:sis:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:* Versions 2.4 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:* Versions 2.5 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:* Versions 2.5.1 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:* Versions 2.5.1 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:* Versions 7.0 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:* Versions 8.0 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:* Versions 9.0 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:* Versions 9.0 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:* Versions 9.0 x86_update_2 Vulnerable ·Sun
  • cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sun
  • cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:* Versions 5.4 Vulnerable ·Sun
  • cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·Sun
  • cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:* Versions 5.5.1 Vulnerable ·Sun
  • cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·Sun
  • cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Sun

Remediation

Red Hat 3 advisories

  • RHSA-2003:227 Released 2003-07-08 · Red Hat rating Critical
    : : : Updated sendmail packages fix vulnerabilities
    • Red Hat Linux 7.1
  • RHSA-2003:120 Released 2003-03-31 · Red Hat rating Critical
    : Updated sendmail packages fix vulnerability
    • Red Hat Linux 6.2
    • Red Hat Linux 7.0
    • Red Hat Linux 7.1
    • Red Hat Linux 7.2
    • Red Hat Linux 7.3
    • Red Hat Linux 8.0
    • Red Hat Linux 9
  • RHSA-2003:121 Released 2003-03-31 · Red Hat rating Critical
    sendmail security update
    • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
    • Red Hat Enterprise Linux ES version 2.1
    • Red Hat Enterprise Linux WS version 2.1
    • Red Hat Linux Advanced Workstation 2.1

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 Fixed RHSA-2003:121
Red Hat Enterprise Linux ES version 2.1Fixed RHSA-2003:121
Red Hat Enterprise Linux WS version 2.1Fixed RHSA-2003:121
Red Hat Linux 6.2Fixed RHSA-2003:120
Red Hat Linux 7.0Fixed RHSA-2003:120
Red Hat Linux 7.1Fixed RHSA-2003:120
Red Hat Linux 7.2Fixed RHSA-2003:120
Red Hat Linux 7.3Fixed RHSA-2003:120
Red Hat Linux 8.0Fixed RHSA-2003:120
Red Hat Linux 9Fixed RHSA-2003:120
Red Hat Linux Advanced Workstation 2.1Fixed RHSA-2003:121

Timeline

  1. 2026-10-02 Threatist record created from CVE-2003-0161
  2. 2026-10-03 Alias added: GHSA-2259-4w76-9w2p

References

Patch 2

Advisory 9

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences