CVE-2002-1337
Critical
Description
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Sendmail
PublishedMar 7, 2003
First seenMar 7, 2003
How to fix
Update
- sendmail sendmail8.9.3, 8.11.6, 8.12.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail sendmail | v < 8.9.3, 8.10.0 ≤ v < 8.11.6, 8.12.0 ≤ v < 8.12.8 | 8.9.3, 8.11.6, 8.12.8 |
| hp alphaserver_sc | No range specified | — |
| gentoo linux | 1.4 | — |
| hp hp-ux | 10.10, 10.20, 11.00, 11.0.4, 11.11, 11.22 | — |
| netbsd netbsd | 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6 | — |
| oracle solaris | 2.6, 7.0, 8, 9 | — |
| sun sunos | No range specified, 5.7, 5.8 | — |
| windriver bsdos | 4.2, 4.3.1, 5.0 | — |
| windriver platform_sa | 1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.