CVE-2003-0694: Apple Mac OS X

High severity, CVSS 10.0. EPSS: 66.2% chance of exploitation in the next 30 days.

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

Affected products

  • Apple Mac OS X: version 10.2 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only; version 10.2.5 only; …
  • Apple Mac OS X Server: version 10.2 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only; version 10.2.5 only; …
  • Compaq TRU64: version 4.0f only; version 4.0f_pk6_bl17 only; version 4.0f_pk7_bl18 only; version 4.0f_pk8_bl22 only; version 4.0g only; version 4.0g_pk3_bl17 only; …
  • Freebsd Freebsd: version 3.0 only; version 4.0 only; version 4.3 only; version 4.4 only; version 4.5 only; version 4.6 only; …
  • Gentoo Linux: version 0.5 only; version 0.7 only; version 1.1a only; version 1.2 only; version 1.4 only
  • HP HP-Ux: version 11.00 only; version 11.0.4 only; version 11.11 only; version 11.22 only
  • IBM Aix: version 4.3.3 only; version 5.1 only; version 5.2 only
  • Netbsd Netbsd: version 1.4.3 only; version 1.5 only; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only; version 1.6 only; …
  • Sendmail Advanced Message Server: version 1.2 only; version 1.3 only
  • Sendmail Sendmail: version 2.6 only; version 2.6.1 only; version 2.6.2 only; version 3.0 only; version 3.0.1 only; version 3.0.2 only; …
  • Sendmail Sendmail Pro: version 8.9.2 only; version 8.9.3 only
  • Sendmail Sendmail Switch: version 2.1 only; version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; version 2.1.4 only; version 2.1.5 only; …
  • Sgi Irix: version 6.5.15 only; version 6.5.16 only; version 6.5.17f only; version 6.5.17m only; version 6.5.18f only; version 6.5.18m only; …
  • Sun Solaris: version 2.6 only; version 7.0 only; version 8.0 only; version 9.0 only
  • Sun Sunos: affected versions not specified; version 5.7 only; version 5.8 only
  • Turbolinux Turbolinux Advanced Server: version 6.0 only
  • Turbolinux Turbolinux Server: version 6.1 only; version 6.5 only; version 7.0 only; version 8.0 only
  • Turbolinux Turbolinux Workstation: version 6.0 only; version 7.0 only; version 8.0 only

Published 2003-10-06. Last modified 2026-06-16.