PT-2003-1044
CVE-2003-0688
·
Published
2003-09-03
·
Updated
2018-05-03
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
openSUSE (affected versions not specified)
Sendmail versions 8.12.8 and earlier
Description
The issue concerns a potential disruption of protected information and a denial of service. It can be exploited remotely. In Sendmail, when using the "enhdnsbl" feature, certain data structures are not properly initialized, allowing remote attackers to cause a process crash via an invalid DNS response.
Recommendations
For openSUSE, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Sendmail versions 8.12.8 and earlier, consider disabling the "enhdnsbl" feature as a temporary workaround until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾