漏洞描述
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/7230↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/317135/30/25220/threaded↗marc.infohttp://marc.info/?l=bugtraq&m=104897487512238&w=2↗sunsolve.sun.comhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-52620-1↗www.redhat.comhttp://www.redhat.com/support/errata/RHSA-2003-120.html↗www.redhat.comhttp://www.redhat.com/support/errata/RHSA-2003-121.html↗distro.conectiva.com.brhttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000614↗www.gentoo.orghttp://www.gentoo.org/security/en/glsa/glsa-200303-27.xml↗lists.grok.org.ukhttp://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004295.html↗www.kb.cert.orghttp://www.kb.cert.org/vuls/id/897604↗marc.infohttp://marc.info/?l=bugtraq&m=104896621106790&w=2↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/321997↗marc.infohttp://marc.info/?l=bugtraq&m=104914999806315&w=2↗sunsolve.sun.comhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-52700-1↗www.cert.orghttp://www.cert.org/advisories/CA-2003-12.html↗www.debian.orghttp://www.debian.org/security/2003/dsa-290↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/316961/30/25250/threaded↗www.debian.orghttp://www.debian.org/security/2003/dsa-278↗lists.apple.comhttp://lists.apple.com/mhonarc/security-announce/msg00028.html↗sunsolve.sun.comhttp://sunsolve.sun.com/search/document.do?assetkey=1-77-1001088.1-1↗