CVE-2002-1337
Sendmail 5.79-8.12.7 - Remote Code Execution via Formatted Address Fields in Header Comments
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2002-1337. PoCs published by bysin, Last Stage of Delirium, sd.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Sendmail's SMTP header parsing component (crackaddr function). It includes shellcode to spawn a reverse shell and is designed for Sendmail versions 5.2 to 8.12.7.
Description
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Sendmail's SMTP header parsing component (crackaddr function). It includes shellcode to spawn a reverse shell and is designed for Sendmail versions 5.2 to 8.12.7.
This exploit targets a buffer overflow vulnerability in Sendmail's SMTP header parsing component, allowing remote code execution. It includes shellcode to spawn a reverse shell and uses brute-forcing techniques to bypass memory address randomization.
This exploit targets a local privilege escalation vulnerability in sendmail 8.11.x by manipulating the GOT entry for setuid() to execute arbitrary shellcode. It uses objdump, gdb, and grep to dynamically locate the target address and constructs a malicious environment variable to trigger the exploit.