CVE-2002-1337

Опубликовано: 07 мар. 2003

Источник: nvd

CVSS2: 10

EPSS Высокий

Описание

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Ссылки

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc
Broken Link
ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6
Broken Link
ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5
Broken Link
ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P
Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571
Broken Link
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028
Broken Link
http://marc.info/?l=bugtraq&m=104673778105192&w=2
Third Party Advisory
http://marc.info/?l=bugtraq&m=104678739608479&w=2
Third Party Advisory
http://marc.info/?l=bugtraq&m=104678862109841&w=2
Third Party Advisory
http://marc.info/?l=bugtraq&m=104678862409849&w=2
Third Party Advisory
http://marc.info/?l=bugtraq&m=104679411316818&w=2
Third Party Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only
Broken Link
http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only
Broken Link
http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only
Broken Link
http://www.cert.org/advisories/CA-2003-07.html
Broken Link
Patch
Third Party Advisory
US Government Resource
http://www.debian.org/security/2003/dsa-257
Broken Link
http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950
Broken Link
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10748.php
Broken Link
http://www.kb.cert.org/vuls/id/398025
Third Party Advisory
US Government Resource
http://www.redhat.com/support/errata/RHSA-2003-073.html
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*

Версия до 8.9.3 (исключая)

cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*

Версия от 8.10.0 (включая) до 8.11.6 (исключая)

cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*

Версия от 8.12.0 (включая) до 8.12.8 (исключая)

Конфигурация 2

Одно из

cpe:2.3:h:hp:alphaserver_sc:*:*:*:*:*:*:*:*

cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*

cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*

cpe:2.3:o:oracle:solaris:2.6:*:*:*:*:*:*:*

cpe:2.3:o:oracle:solaris:7.0:*:*:*:*:*:*:*

cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*

cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

cpe:2.3:o:windriver:bsdos:4.2:*:*:*:*:*:*:*

cpe:2.3:o:windriver:bsdos:4.3.1:*:*:*:*:*:*:*

cpe:2.3:o:windriver:bsdos:5.0:*:*:*:*:*:*:*

cpe:2.3:o:windriver:platform_sa:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.72202

Высокий

10 Critical

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2002-1337

redhat

больше 23 лет назад

CVE-2002-1337

debian

больше 23 лет назад

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to ...

GHSA-2vpw-h4q9-62fp

github

около 4 лет назад

EPSS

Процентиль: 99%

0.72202

Высокий

10 Critical

CVSS2

Дефекты

CWE-120