Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2002-1337 Details

Description

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc	CVE	Broken Link
ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6	CVE	Broken Link
ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5	CVE	Broken Link
ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P	CVE	Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571	CVE	Broken Link
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028	CVE	Broken Link
http://marc.info/?l=bugtraq&m=104673778105192&w=2	CVE	Third Party Advisory
http://marc.info/?l=bugtraq&m=104678739608479&w=2	CVE	Third Party Advisory
http://marc.info/?l=bugtraq&m=104678862109841&w=2	CVE	Third Party Advisory
http://marc.info/?l=bugtraq&m=104678862409849&w=2	CVE	Third Party Advisory
http://marc.info/?l=bugtraq&m=104679411316818&w=2	CVE	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222	CVE	Broken Link
http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only	CVE	Broken Link
http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only	CVE	Broken Link
http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only	CVE	Broken Link
http://www.cert.org/advisories/CA-2003-07.html	CVE	Broken LinkPatchThird Party AdvisoryUS Government Resource
http://www.debian.org/security/2003/dsa-257	CVE	Broken Link
http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950	CVE	Broken LinkPatchVendor Advisory
http://www.iss.net/security_center/static/10748.php	CVE	Broken Link
http://www.kb.cert.org/vuls/id/398025	CVE	Third Party AdvisoryUS Government Resource
http://www.redhat.com/support/errata/RHSA-2003-073.html	CVE	Broken Link
http://www.redhat.com/support/errata/RHSA-2003-074.html	CVE	Broken Link
http://www.redhat.com/support/errata/RHSA-2003-227.html	CVE	Broken Link
http://www.securityfocus.com/bid/6991	CVE	Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
http://www.sendmail.org/8.12.8.html	CVE	Broken LinkPatchVendor Advisory
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc	[email protected]	Broken Link
ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6	[email protected]	Broken Link
ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5	[email protected]	Broken Link
ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P	[email protected]	Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571	[email protected]	Broken Link
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028	[email protected]	Broken Link
http://marc.info/?l=bugtraq&m=104673778105192&w=2	[email protected]	Third Party Advisory
http://marc.info/?l=bugtraq&m=104678739608479&w=2	[email protected]	Third Party Advisory
http://marc.info/?l=bugtraq&m=104678862109841&w=2	[email protected]	Third Party Advisory
http://marc.info/?l=bugtraq&m=104678862409849&w=2	[email protected]	Third Party Advisory
http://marc.info/?l=bugtraq&m=104679411316818&w=2	[email protected]	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222	[email protected]	Broken Link
http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only	[email protected]	Broken Link
http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only	[email protected]	Broken Link
http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only	[email protected]	Broken Link
http://www.cert.org/advisories/CA-2003-07.html	[email protected]	Broken LinkPatchThird Party AdvisoryUS Government Resource
http://www.debian.org/security/2003/dsa-257	[email protected]	Broken Link
http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950	[email protected]	Broken LinkPatchVendor Advisory
http://www.iss.net/security_center/static/10748.php	[email protected]	Broken Link
http://www.kb.cert.org/vuls/id/398025	[email protected]	Third Party AdvisoryUS Government Resource
http://www.redhat.com/support/errata/RHSA-2003-073.html	[email protected]	Broken Link
http://www.redhat.com/support/errata/RHSA-2003-074.html	[email protected]	Broken Link
http://www.redhat.com/support/errata/RHSA-2003-227.html	[email protected]	Broken Link
http://www.securityfocus.com/bid/6991	[email protected]	Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
http://www.sendmail.org/8.12.8.html	[email protected]	Broken LinkPatchVendor Advisory

see all 50 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	[email protected]

Affected Products

Product	Versions
sendmail sendmail	< 8.9.3 >= 8.10.0, < 8.11.6 >= 8.12.0, < 8.12.8
CPE cpe:2.3:a:sendmail:sendmail:::::::: Remediation No remediation found in references.
hp alphaserver sc	All versions
CPE cpe:2.3:h:hp:alphaserver_sc:::::::: Remediation No remediation found in references.
gentoo linux	1.4 rc1 1.4 rc2
CPE cpe:2.3:o:gentoo:linux:1.4:rc1:::::: cpe:2.3:o:gentoo:linux:1.4:rc2:::::: Remediation No remediation found in references.
hp hp-ux	10.10 10.20 11.00 11.0.4 11.11
CPE cpe:2.3:o:hp:hp-ux:10.10:::::::* cpe:2.3:o:hp:hp-ux:10.20:::::::* cpe:2.3:o:hp:hp-ux:11.00:::::::* cpe:2.3:o:hp:hp-ux:11.0.4:::::::* cpe:2.3:o:hp:hp-ux:11.11:::::::* cpe:2.3:o:hp:hp-ux:11.22:::::::* Remediation No remediation found in references.
netbsd netbsd	1.5 1.5.1 1.5.2 1.5.3 1.6
CPE cpe:2.3:o:netbsd:netbsd:1.5:::::::* cpe:2.3:o:netbsd:netbsd:1.5.1:::::::* cpe:2.3:o:netbsd:netbsd:1.5.2:::::::* cpe:2.3:o:netbsd:netbsd:1.5.3:::::::* cpe:2.3:o:netbsd:netbsd:1.6:::::::* Remediation No remediation found in references.
oracle solaris	2.6 7.0 8 9
CPE cpe:2.3:o:oracle:solaris:2.6:::::::* cpe:2.3:o:oracle:solaris:7.0:::::::* cpe:2.3:o:oracle:solaris:8:::::::* cpe:2.3:o:oracle:solaris:9:::::::* Remediation No remediation found in references.
sun sunos	5.7 5.8
CPE cpe:2.3:o:sun:sunos:-:::::::* cpe:2.3:o:sun:sunos:5.7:::::::* cpe:2.3:o:sun:sunos:5.8:::::::* Remediation No remediation found in references.
windriver bsdos	4.2 4.3.1 5.0
CPE cpe:2.3:o:windriver:bsdos:4.2:::::::* cpe:2.3:o:windriver:bsdos:4.3.1:::::::* cpe:2.3:o:windriver:bsdos:5.0:::::::* Remediation No remediation found in references.
windriver platform sa	1.0
CPE cpe:2.3:o:windriver:platform_sa:1.0:::::::* Remediation No remediation found in references.

Change History

11 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 20, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 9, 2024	Modified Analysis	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
May 3, 2018	CVE Modified	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Jan 1, 2004	Initial Analysis	[email protected]

CVE-2002-1337 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO