CVEvulnerability

CVE-2002-1337

10.0 HIGH Published 2003-03-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-03-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Affected configurations

• sendmail sendmail (< 8.9.3) • sendmail sendmail (>= 8.10.0 < 8.11.6) • sendmail sendmail (>= 8.12.0 < 8.12.8) • hp alphaserver sc • gentoo linux 1.4 • hp hp-ux 10.10 • hp hp-ux 10.20 • hp hp-ux 11.00 • hp hp-ux 11.0.4 • hp hp-ux 11.11 • hp hp-ux 11.22 • netbsd netbsd 1.5 • netbsd netbsd 1.5.1 • netbsd netbsd 1.5.2 • netbsd netbsd 1.5.3 • netbsd netbsd 1.6 • oracle solaris 2.6 • oracle solaris 7.0 • oracle solaris 8 • oracle solaris 9 • sun sunos • sun sunos 5.7 • sun sunos 5.8 • windriver bsdos 4.2 • windriver bsdos 4.3.1 • windriver bsdos 5.0 • windriver platform sa 1.0

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

Referenced by CWE · observed example (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References