CVE:CVE-2003-0681
CNNVD:CNNVD-200310-016
Sendmail 8.12.9版本在ruleset parsing存在潜在缓冲区溢出漏洞。当使用不标准的rulesets(1)recipient，(2)final，或者(3)mailer-specific信封收件人，该漏洞具有未知的后果。
solution:Upgrade sendmail advanced_message_server to a higher version than 1.2,1.3,and avoid the version 1.2,1.3; Upgrade sendmail sendmail to a higher version than 2.6,2.6.1,2.6.2,3.0,3.0.1,3.0.2,3.0.3,8.8.8,8.9.0,8.9.1,8.9.2,8.9.3,8.10,8.10.1,8.10.2,8.11.0,8.11.1,8.11.2,8.11.3,8.11.4,8.11.5,8.11.6,8.12:beta10,8.12:beta12,8.12:beta16,8.12:beta5,8.12:beta7,8.12.0,8.12.1,8.12.2,8.12.3,8.12.4,8.12.5,8.12.6,8.12.7,8.12.8,8.12.9,and avoid the version 2.6,2.6.1,2.6.2,3.0,3.0.1,3.0.2,3.0.3,8.8.8,8.9.0,8.9.1,8.9.2,8.9.3,8.10,8.10.1,8.10.2,8.11.0,8.11.1,8.11.2,8.11.3,8.11.4,8.11.5,8.11.6,8.12:beta10,8.12:beta12,8.12:beta16,8.12:beta5,8.12:beta7,8.12.0,8.12.1,8.12.2,8.12.3,8.12.4,8.12.5,8.12.6,8.12.7,8.12.8,8.12.9; Upgrade sendmail sendmail_pro to a higher version than 8.9.2,8.9.3,and avoid the version 8.9.2,8.9.3; Upgrade sendmail sendmail_switch to a higher version than 2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.2,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,3.0,3.0.1,3.0.2,3.0.3,and avoid the version 2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.2,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,3.0,3.0.1,3.0.2,3.0.3; Upgrade apple mac_os_x to a higher version than 10.2,10.2.1,10.2.2,10.2.3,10.2.4,10.2.5,10.2.6,and avoid the version 10.2,10.2.1,10.2.2,10.2.3,10.2.4,10.2.5,10.2.6; Upgrade apple mac_os_x_server to a higher version than 10.2,10.2.1,10.2.2,10.2.3,10.2.4,10.2.5,10.2.6,and avoid the version 10.2,10.2.1,10.2.2,10.2.3,10.2.4,10.2.5,10.2.6; Upgrade gentoo linux to a higher version than 0.5,0.7,1.1a,1.2,1.4:rc1,1.4:rc2,1.4:rc3,and avoid the version 0.5,0.7,1.1a,1.2,1.4:rc1,1.4:rc2,1.4:rc3; Upgrade hp hp-ux to a higher version than 11.00,11.0.4,11.11,11.22,and avoid the version 11.00,11.0.4,11.11,11.22; Upgrade ibm aix to a higher version than 4.3.3,5.1,5.2,and avoid the version 4.3.3,5.1,5.2; Upgrade netbsd netbsd to a higher version than 1.4.3,1.5,1.5.1,1.5.2,1.5.3,1.6,1.6:beta,1.6.1,and avoid the version 1.4.3,1.5,1.5.1,1.5.2,1.5.3,1.6,1.6:beta,1.6.1; Upgrade openbsd openbsd to a higher version than 3.2,3.3,and avoid the version 3.2,3.3; Upgrade turbolinux turbolinux_advanced_server to a higher version than 6.0,and avoid the version 6.0; Upgrade turbolinux turbolinux_server to a higher version than 6.1,6.5,7.0,8.0,and avoid the version 6.1,6.5,7.0,8.0; Upgrade turbolinux turbolinux_workstation to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0