← Database

CVE-2003-0688

MEDIUM CVSS: 5.0 Published: 2003-10-20 Modified: 2026-06-16

Description

The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.

Affected Platforms

Freebsd FreebsdRedhat SendmailCompaq Tru64Openbsd OpenbsdSendmail SendmailSgi Irix

Weakness Type

NVD-CWE-Other

References