CVE-2009-1490

Description

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/50355

https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1487

http://www.sendmail.org/releases/8.13.2

http://www.nmrc.org/~thegnome/blog/apr09/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS