CVE-2003-0308: Debian Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.

Affected products

• Debian Debian Linux: version 3.0 only
• Sendmail Sendmail: version 8.9.3 only; version 8.12.3 only; version 8.12.9 only

Published 2003-05-15. Last modified 2026-06-16.