CVE-2002-1337: Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments…

Description

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Exploitation

Is it being used?

Exploit prediction (EPSS)72.6% · higher than 99% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AS

Alphaserver SC · HP

All versions, or not specified · source: NVD

BS

Bsdos · Windriver

4.2; 4.3.1; 5.0 · source: NVD

HP

Hp-ux · HP

10.10; 10.20; 11.00; 11.0.4; 11.11; 11.22 · source: NVD

LI

Linux · Gentoo

1.4; 1.4 · source: NVD

NE

Netbsd · Netbsd

1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 · source: NVD

PS

Platform SA · Windriver

1.0 · source: NVD

SE

Sendmail · Sendmail

before 8.9.3; 8.10.0 before 8.11.6; 8.12.0 before 8.12.8 · source: NVD

SO

Solaris · Oracle

2.6; 7.0; 8; 9 · source: NVD

SU

Sunos · Sun

5.7; 5.8 · source: NVD