vulnwire
10.0crit

CVE-2002-1337in critical feed3 exploits

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
72.6%
percentile 99%
Public exploits
3
Exploit-DB

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Exploit prediction (EPSS)

72.64% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-411 Sendmail 8.11.x (Linux/i386) - Local Privilege Escalation · local · 2001-01-01
  • EDB-22314 Sendmail 8.12.x - Header Processing Buffer Overflow (2) · remote · 2003-03-02
  • EDB-22313 Sendmail 8.12.x - Header Processing Buffer Overflow (1) · remote · 2003-03-02

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-120 Buffer Copy without Checking Size of Input

References

  • redhat.com /support/errata/RHSA-2003-073.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • www-1.ibm.com /support/search.wss?rs=0&q=IY40501&apar=only · vendor-advisory, x_refsource_AIXAPAR, x_transferred
  • marc.info /?l=bugtraq&m=104678862109841&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • redhat.com /support/errata/RHSA-2003-227.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /bid/6991 · vdb-entry, x_refsource_BID, x_transferred
  • kb.cert.org /vuls/id/398025 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • sendmail.org /8.12.8.html · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2003/dsa-257 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • marc.info /?l=bugtraq&m=104678739608479&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • redhat.com /support/errata/RHSA-2003-074.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • cert.org /advisories/CA-2003-07.html · third-party-advisory, x_refsource_CERT, x_transferred
  • marc.info /?l=bugtraq&m=104673778105192&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • frontal2.mandriva.com /security/advisories?name=MDKSA-2003:028 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • www-1.ibm.com /support/search.wss?rs=0&q=IY40500&apar=only · vendor-advisory, x_refsource_AIXAPAR, x_transferred
  • iss.net /security_center/static/10748.php · vdb-entry, x_refsource_XF, x_transferred
  • distro.conectiva.com.br /atualizacoes/?id=a&anuncio=000571 · vendor-advisory, x_refsource_CONECTIVA, x_transferred
  • marc.info /?l=bugtraq&m=104679411316818&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • iss.net /issEn/delivery/xforce/alertdetail.jsp?oid=21950 · third-party-advisory, x_refsource_ISS, x_transferred
  • www-1.ibm.com /support/search.wss?rs=0&q=IY40502&apar=only · vendor-advisory, x_refsource_AIXAPAR, x_transferred
  • marc.info /?l=bugtraq&m=104678862409849&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.