CVE-2002-1337
CVE-2002-1337
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
EPSS 72.6% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
sendmail Debian:12
- Affected ranges
- ECOSYSTEM: < 8.13.0.PreAlpha4-0
Update to 8.13.0.PreAlpha4-0
sendmail Debian:13
- Affected ranges
- ECOSYSTEM: < 8.13.0.PreAlpha4-0
Update to 8.13.0.PreAlpha4-0
sendmail Debian:14
- Affected ranges
- ECOSYSTEM: < 8.13.0.PreAlpha4-0
Update to 8.13.0.PreAlpha4-0
Original sources
- http://www.redhat.com/support/errata/RHSA-2003-073.html
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only
- http://marc.info/?l=bugtraq&m=104678862109841&w=2
- http://www.redhat.com/support/errata/RHSA-2003-227.html
- http://www.securityfocus.com/bid/6991
- http://www.kb.cert.org/vuls/id/398025
- http://www.sendmail.org/8.12.8.html
- http://www.debian.org/security/2003/dsa-257
- http://marc.info/?l=bugtraq&m=104678739608479&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222
- http://www.redhat.com/support/errata/RHSA-2003-074.html
- http://www.cert.org/advisories/CA-2003-07.html
- http://marc.info/?l=bugtraq&m=104673778105192&w=2
- http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only
- http://www.iss.net/security_center/static/10748.php
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571
- http://marc.info/?l=bugtraq&m=104679411316818&w=2
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only
- http://marc.info/?l=bugtraq&m=104678862409849&w=2
- https://nvd.nist.gov/vuln/detail/CVE-2002-1337