CVE-2003-0681: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 22.4% chance of exploitation in the next 30 days.

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

Affected products

• Apple Mac OS X: version 10.2 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only; version 10.2.5 only; …
• Apple Mac OS X Server: version 10.2 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only; version 10.2.5 only; …
• Gentoo Linux: version 0.5 only; version 0.7 only; version 1.1a only; version 1.2 only; version 1.4 only
• HP HP-Ux: version 11.00 only; version 11.0.4 only; version 11.11 only; version 11.22 only
• IBM Aix: version 4.3.3 only; version 5.1 only; version 5.2 only
• Netbsd Netbsd: version 1.4.3 only; version 1.5 only; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only; version 1.6 only; …
• OpenBSD OpenBSD: version 3.2 only; version 3.3 only
• Sendmail Advanced Message Server: version 1.2 only; version 1.3 only
• Sendmail Sendmail: version 2.6 only; version 2.6.1 only; version 2.6.2 only; version 3.0 only; version 3.0.1 only; version 3.0.2 only; …
• Sendmail Sendmail Pro: version 8.9.2 only; version 8.9.3 only
• Sendmail Sendmail Switch: version 2.1 only; version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; version 2.1.4 only; version 2.1.5 only; …
• Turbolinux Turbolinux Advanced Server: version 6.0 only
• Turbolinux Turbolinux Server: version 6.1 only; version 6.5 only; version 7.0 only; version 8.0 only
• Turbolinux Turbolinux Workstation: version 6.0 only; version 7.0 only; version 8.0 only

Published 2003-10-06. Last modified 2026-06-16.