Every CVESearch/Get API key

CVE-2002-1337

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via...

10.0 HighPublic exploitFix available

CVE-2002-1337 is a high vulnerability (CVSS 10.0) in Sendmail, published March 4, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 72.6%, the 99th percentile. Fixed in sendmail 8.13.0.PreAlpha4-0.

What does this mean?
Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
72.6%EPSS, 99th percentile
Exploitation
None known3 public exploits
Fixed in
8.13.0.PreAlpha4-0sendmail +4 more

Description

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Exploit likelihood

72.6%Up 13.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sendmail
Debian:12
before 8.13.0.PreAlpha4-0
8.13.0.PreAlpha4-0
sendmail
Debian:13
before 8.13.0.PreAlpha4-0
8.13.0.PreAlpha4-0
sendmail
Debian:14
before 8.13.0.PreAlpha4-0
8.13.0.PreAlpha4-0
sendmail
Debian:3.0
before 8.12.3-5
8.12.3-5
sendmail-wide
Debian:3.0
before 8.12.3+3.5Wbeta-5.2
8.12.3+3.5Wbeta-5.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSendmail 8.11.x (Linux/i386) - Local Privilege Escalation2001-01-01
Exploit-DBSendmail 8.12.x - Header Processing Buffer Overflow (1)2003-03-02
Exploit-DBSendmail 8.12.x - Header Processing Buffer Overflow (2)2003-03-02

What each source reports

NVD Score used10.0

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Record
CVE-2002-1337
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-120
Updated
2026-11-02
CVE ListNo score

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Record
CVE-2002-1337
Updated
2026-11-02
EUVDEUVD-2002-1321No score

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Record
EUVD-2002-1321
Updated
2026-11-03
GitHub AdvisoriesGHSA-2vpw-h4q9-62fpNo score

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via...

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Record
GHSA-2vpw-h4q9-62fp
Updated
2026-11-02
OSVNo score

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Record
CVE-2002-1337
Updated
2026-11-02
OSVDEBIAN-CVE-2002-1337No score

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Record
DEBIAN-CVE-2002-1337
Updated
2026-11-02

History

History
RecordedChangedSources
exploits, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 18 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open