CVE-2003-0681

CVE-2003-0681 describes a potential buffer overflow in Sendmail 8.12.9 affecting its ruleset parsing, specifically when using nonstandard recipient, final, or mailer-specific envelope recipient rulesets. This vulnerability impacts a wide range of products including Apple, Gentoo, HP, IBM, and Sendmail itself. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing for potential remote exploitation with low attack complexity, leading to partial confidentiality, integrity, and availability impacts. Its FAUCET Risk Score of 97/100 further emphasizes its critical nature. While not listed on the KEV catalog, an exploit (EDB-23154) for a remote buffer overrun variant exists on ExploitDB, indicating public exploit code availability. The CVE has garnered significant community discussion, with 10 mentions, suggesting ongoing interest despite its age.