CVE-2002-1337

critical

Description

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

References

Advisories
More

http://www.kb.cert.org/vuls/id/398025

http://marc.info/?l=bugtraq&m=104679411316818&w=2

http://marc.info/?l=bugtraq&m=104678862409849&w=2

http://marc.info/?l=bugtraq&m=104678862109841&w=2

http://marc.info/?l=bugtraq&m=104678739608479&w=2

http://marc.info/?l=bugtraq&m=104673778105192&w=2

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222

https://euvd.enisa.europa.eu/vulnerability/EUVD-2002-1321

http://www.sendmail.org/8.12.8.html

http://www.securityfocus.com/bid/6991

http://www.redhat.com/support/errata/RHSA-2003-227.html

http://www.redhat.com/support/errata/RHSA-2003-074.html

http://www.redhat.com/support/errata/RHSA-2003-073.html

http://www.iss.net/security_center/static/10748.php

http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950

http://www.debian.org/security/2003/dsa-257

http://www.cert.org/advisories/CA-2003-07.html

http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only

http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571

Details

Source: Mitre, NVD

Published: 2003-03-07

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H