CVE-2003-0688: Compaq TRU64

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.

Affected products

• Compaq TRU64: version 5.0a only; version 5.1 only
• Freebsd Freebsd: version 4.6 only; version 4.7 only; version 4.8 only; version 5.0 only
• OpenBSD OpenBSD: version 3.2 only
• Red Hat Sendmail: version 8.12.5-7 only; version 8.12.8-4 only
• Sendmail Sendmail: version 8.12.1 only; version 8.12.2 only; version 8.12.3 only; version 8.12.4 only; version 8.12.5 only; version 8.12.6 only; …
• Sgi Irix: version 6.5.19 only; version 6.5.20 only; version 6.5.21 only

Published 2003-10-20. Last modified 2026-06-16.