PT-2003-1044
CVE-2003-0688
·
تاريخ النشر
2003-09-03
·
تاريخ التحديث
2018-05-03
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
openSUSE (affected versions not specified)
Sendmail versions 8.12.8 and earlier
Description
The issue concerns a potential disruption of protected information and a denial of service. It can be exploited remotely. In Sendmail, when using the "enhdnsbl" feature, certain data structures are not properly initialized, allowing remote attackers to cause a process crash via an invalid DNS response.
Recommendations
For openSUSE, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Sendmail versions 8.12.8 and earlier, consider disabling the "enhdnsbl" feature as a temporary workaround until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾