CVE-2003-0308

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2003-0308

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2003-0308.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2003-0308

Downstream

DEBIAN-CVE-2003-0308

DSA-305

Published

2003-05-15T04:00:00Z

Modified

2026-04-10T03:36:07.686501Z

Summary

[none]

Details

The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.

References

http://www.debian.org/security/2003/dsa-305
http://bugs.debian.org/496408
http://dev.gentoo.org/~rbu/security/debiantemp/sendmail-base
http://www.openwall.com/lists/oss-security/2008/10/30/2
https://bugs.gentoo.org/show_bug.cgi?id=235770

CVE-2003-0308

Affected packages