VDB
CVE-2002-1337
CVE-2002-1337
PUBLISHED
CVSS 10 CRITICAL
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
EPSS 72.64% · 99.4th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
72.64%
99.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| netbsd | netbsd | 1.5, 1.5.1, 1.6 |
| windriver | platform_sa | 1.0 |
| hp | alphaserver_sc | |
| gentoo | linux | 1.4, 1.4 |
| sendmail | sendmail | 0, 8.12.0, 8.10.0 |
| n/a | n/a | * |
| oracle | solaris | 8, 7.0, 2.6 |
| windriver | bsdos | 5.0, 4.2, 4.3.1 |
| hp | hp-ux | 11.22, 10.20, 10.10 |
| sun | sunos | 5.7, 5.8 |
Timeline
- CVE Published
- Mar 2, 2003 PoC Published
- Sep 23, 2010 PoC Published
- Feb 4, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
- Nov 1, 2023 EPSS Score
References
- IY40501 vendor-advisory
- RHSA-2003:227 vendor-advisory
- 20030303 sendmail 8.12.8 available mailing-list
- CSSA-2003-SCO.6 vendor-advisory
- CSSA-2003-SCO.5 vendor-advisory
- CLA-2003:571 vendor-advisory
- HPSBUX0302-246 vendor-advisory
- 20030301-01-P vendor-advisory
- 20030304 [LSD] Technical analysis of the remote sendmail vulnerability mailing-list
- RHSA-2003:074 vendor-advisory
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc technical
- http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028 technical
- http://marc.info/?l=bugtraq&m=104678862109841&w=2 advisory
- http://www.cert.org/advisories/CA-2003-07.html technical
- http://www.debian.org/security/2003/dsa-257 technical
- http://www.securityfocus.com/bid/6991 technical
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950 technical
- http://www.iss.net/security_center/static/10748.php technical
- http://www.sendmail.org/8.12.8.html technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222 technical
…and 6 more