CVE-2002-1337 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 72.6% (pctl 99)
Patch early
A public exploit exists.
Description
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 72.64% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-120 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2003-03-07 |
| Last modified | 2026-06-16 |
Affected (9)
| Vendor | Product |
|---|---|
| gentoo | linux |
| hp | alphaserver sc |
| hp | hp-ux |
| netbsd | netbsd |
| oracle | solaris |
| sendmail | sendmail |
| sun | sunos |
| windriver | bsdos |
| windriver | platform sa |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Sendmail 8.12.x - Header Processing Buffer Overflow (1) | 2003-03-02 |
| exploit-db | Sendmail 8.12.x - Header Processing Buffer Overflow (2) | 2003-03-02 |
| exploit-db | Sendmail 8.11.x (Linux/i386) - Local Privilege Escalation | 2001-01-01 |
References
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc
- ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6
- ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5
- ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571
- http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028
- http://marc.info/?l=bugtraq&m=104673778105192&w=2
- http://marc.info/?l=bugtraq&m=104678739608479&w=2
- http://marc.info/?l=bugtraq&m=104678862109841&w=2
- http://marc.info/?l=bugtraq&m=104678862409849&w=2
- http://marc.info/?l=bugtraq&m=104679411316818&w=2
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only
- http://www.cert.org/advisories/CA-2003-07.html
- http://www.debian.org/security/2003/dsa-257
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950
- http://www.iss.net/security_center/static/10748.php
- http://www.kb.cert.org/vuls/id/398025
- http://www.redhat.com/support/errata/RHSA-2003-073.html
→ the Explorer · watch your stack · NVD