CVE-2002-1337
NoneCVSS
—
EPSS
72.6%
Published
Mar 7, 2003
CISA due date
—
The record
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | sendmail | 0 | 8.13.0.PreAlpha4-0 |
| Debian:12 | sendmail | 0 | 8.13.0.PreAlpha4-0 |
| Debian:13 | sendmail | 0 | 8.13.0.PreAlpha4-0 |
| Debian:3.0 | sendmail | 0 | 8.12.3-5 |
| Debian:3.0 | sendmail-wide | 0 | 8.12.3+3.5Wbeta-5.2 |
Related vulnerabilities
- CVE-2009-1490 Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a… Also affects sendmail
- CVE-2006-0058 Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to… Also affects sendmail
- CVE-2003-0681 A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the… Also affects sendmail
- CVE-2003-0694 The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code… Also affects sendmail
- CVE-2003-0161 The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does… Also affects sendmail
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-120
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-120
- CVE-2026-90803 A security vulnerability has been detected in GNU Binutils 2.47. CWE-120