CVE-2003-0688 describes a denial-of-service vulnerability in Sendmail versions 8.12.8 and earlier, specifically within its DNS map code when the "enhdnsbl" feature is enabled. This flaw, affecting various operating systems including FreeBSD and Red Hat, stems from improper initialization of data structures, allowing remote attackers to crash the Sendmail process via a malformed DNS response. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P), it is a network-based, low-complexity attack requiring no authentication, leading to a partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat level.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.12.5-7CPE matchmatch criteria | cpe:2.3:a:redhat:sendmail:8.12.5-7:*:i386:*:*:*:*:* | ||
8.12.5-7CPE matchmatch criteria | cpe:2.3:a:redhat:sendmail:8.12.5-7:*:i386_cf:*:*:*:*:* | ||
8.12.5-7CPE matchmatch criteria | cpe:2.3:a:redhat:sendmail:8.12.5-7:*:i386_dev:*:*:*:*:* | ||
8.12.5-7CPE matchmatch criteria | cpe:2.3:a:redhat:sendmail:8.12.5-7:*:i386_doc:*:*:*:*:* | ||
8.12.8-4CPE matchmatch criteria | cpe:2.3:a:redhat:sendmail:8.12.8-4:*:i386:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.