CVE-2009-1490
NoneCVSS
—
EPSS
12.6%
Published
May 5, 2009
CISA due date
—
The record
Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | sendmail | 0 | 8.13.2-0 |
| Debian:12 | sendmail | 0 | 8.13.2-0 |
| Debian:13 | sendmail | 0 | 8.13.2-0 |
Related vulnerabilities
- CVE-2006-0058 Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to… Also affects sendmail
- CVE-2003-0681 A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the… Also affects sendmail
- CVE-2003-0694 The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code… Also affects sendmail
- CVE-2003-0161 The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does… Also affects sendmail
- CVE-2002-1337 Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary… Also affects sendmail
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119