CVE-2002-1337

Sendmail <8.12.7 - RCE

Title source: llm
STIX 2.1

Description

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Exploits (3)

exploitdb WORKING POC VERIFIED
by bysin · cremoteunix
https://www.exploit-db.com/exploits/22314
exploitdb WORKING POC VERIFIED
by Last Stage of Delirium · cremoteunix
https://www.exploit-db.com/exploits/22313
exploitdb WORKING POC VERIFIED
by sd · clocallinux
https://www.exploit-db.com/exploits/411

References (25)

... and 5 more

Scores

EPSS 0.5200
EPSS Percentile 97.9%

Details

CWE
CWE-120
Status published
Products (25)
gentoo/linux 1.4 rc1 (2 CPE variants)
hp/alphaserver_sc
hp/hp-ux 10.10
hp/hp-ux 10.20
hp/hp-ux 11.00
hp/hp-ux 11.0.4
hp/hp-ux 11.11
hp/hp-ux 11.22
netbsd/netbsd 1.5
netbsd/netbsd 1.5.1
... and 15 more
Published Mar 07, 2003
Tracked Since Feb 18, 2026