CVE-2002-1337
NoneCVSS
—
EPSS
72.6%
Published
Mar 7, 2003
CISA due date
—
The record
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | sendmail | 0 | 8.13.0.PreAlpha4-0 |
| Debian:12 | sendmail | 0 | 8.13.0.PreAlpha4-0 |
| Debian:13 | sendmail | 0 | 8.13.0.PreAlpha4-0 |
| Debian:3.0 | sendmail | 0 | 8.12.3-5 |
| Debian:3.0 | sendmail-wide | 0 | 8.12.3+3.5Wbeta-5.2 |
Related vulnerabilities
- CVE-2009-1490 Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a… Also affects sendmail
- CVE-2006-0058 Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to… Also affects sendmail
- CVE-2003-0681 A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the… Also affects sendmail
- CVE-2003-0694 The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code… Also affects sendmail
- CVE-2003-0161 The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does… Also affects sendmail
- CVE-2026-80186 A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol… CWE-120
- CVE-2026-18103 A flaw was found in dhcp-server. CWE-120
- CVE-2026-48706 Envoy is an open source edge and service proxy designed for cloud-native applications. CWE-120