Description
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- Sendmail 8.12.8 (BSD) - 'Prescan()' Remote Command Execution EDB-24 · remote · Apr 30, 2003 · verified
- Sendmail 8.11.6 - Address Prescan Memory Corruption EDB-22442 · local · Mar 29, 2003 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- DSA-290 sendmail-wide - char-to-int conversion Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-278 sendmail - char-to-int conversion Debian Security (DSA / DLA) · Mar 9, 2026
References
- 1001088 vendor-advisory
- 52620 vendor-advisory
- 7230 vdb-entry
- 20030330 [OpenPKG-SA-2003.027] OpenPKG Security Advisory (sendmail) mailing-list
- RHSA-2003:120 vendor-advisory
- 20030401 Immunix Secured OS 7+ openssl update mailing-list
- DSA-278 vendor-advisory
- DSA-290 vendor-advisory
- http://lists.apple.com/mhonarc/security-announce/msg00028.html
- 52700 vendor-advisory
- CA-2003-12 third-party-advisory
- 20030331 GLSA: sendmail (200303-27) mailing-list
- RHSA-2003:121 vendor-advisory
- CLA-2003:614 vendor-advisory
- GLSA-200303-27 vendor-advisory
- 20030329 Sendmail: -1 gone wild mailing-list
- 20030329 Sendmail: -1 gone wild mailing-list
- 20030520 [Fwd: 127 Research and Development: 127 Day!] mailing-list
- 20030329 sendmail 8.12.9 available mailing-list
- VU#897604 third-party-advisory