CVE-2002-1337: Buffer Overflow

Published Mar 7, 2003
·
Updated

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Affected Software

85 affected components
Sendmail Sendmail<8.9.3
Sendmail Sendmail>=8.10.0<8.11.6
Sendmail Sendmail>=8.12.0<8.12.8
HP Alphaserver Sc
Gentoo Linux=1.4-rc1
Gentoo Linux=1.4-rc2
HP HP-UX=10.10
HP HP-UX=10.20
HP HP-UX=11.00
HP HP-UX=11.0.4
HP HP-UX=11.11
HP HP-UX=11.22
NetBSD NetBSD=1.5
NetBSD NetBSD=1.5.1
NetBSD NetBSD=1.5.2
NetBSD NetBSD=1.5.3
NetBSD NetBSD=1.6
Oracle Solaris=2.6
Oracle Solaris=7.0
Oracle Solaris=8
Oracle Solaris=9
Sun SunOS
Sun SunOS=5.7
Sun SunOS=5.8
Windriver Bsdos=4.2
Windriver Bsdos=4.3.1
Windriver Bsdos=5.0
Windriver Platform Sa=1.0
Sendmail Sendmail Switch=2.1.2
Sendmail Sendmail Switch=3.0.2
Sendmail Sendmail Switch=2.2.2
Sendmail Sendmail=8.9.2
Sendmail Sendmail Switch=2.1.1
Sendmail Sendmail=8.11.4
Sendmail Sendmail=8.8.8
Sendmail Sendmail=2.6.1
Sendmail Sendmail=8.12-beta16
Sendmail Sendmail=8.11.1
Sendmail Sendmail=8.11.0
Sendmail Sendmail Switch=2.1.3
Sendmail Sendmail=8.12.3
Sendmail Sendmail=2.6
Sendmail Sendmail=8.11.3
Sendmail Sendmail Switch=2.2.1
Sendmail Advanced Message Server=1.3
Sendmail Sendmail=5.59
Sendmail Sendmail=5.61
Sendmail Sendmail=8.9.1
Sendmail Sendmail=3.0.1
Sendmail Advanced Message Server=1.2
Sendmail Sendmail Switch=2.2
Sendmail Sendmail=8.10.2
Sendmail Sendmail=8.12.4
Sendmail Sendmail=8.12-beta12
Sendmail Sendmail=8.9.0
Sendmail Sendmail=8.10.1
Sendmail Sendmail Switch=2.1
Sendmail Sendmail=8.12.1
Sendmail Sendmail=5.65
Sendmail Sendmail=8.11.6
Sendmail Sendmail=8.12.5
Sendmail Sendmail Switch=2.2.3
Sendmail Sendmail=8.10
Sendmail Sendmail Switch=3.0
Sendmail Sendmail=3.0
Sendmail Sendmail=8.12-beta7
Sendmail Sendmail=8.9.3
Sendmail Sendmail=8.12.0
Sendmail Sendmail=8.12-beta5
Sendmail Sendmail=8.12.6
SGI Freeware=1.0
Sendmail Sendmail Switch=3.0.1
Sendmail Sendmail=3.0.2
Sendmail Sendmail=8.12-beta10
Sendmail Sendmail=8.12.2
Sendmail Sendmail=8.11.2
Sendmail Sendmail=8.12.7
Sendmail Sendmail Switch=2.2.4
Sendmail Sendmail=8.11.5
Sendmail Sendmail Switch=2.1.4
Sun Solaris=9.0
Sun Solaris=7.0
Sun Solaris=9.0
Sun Solaris=2.6
Sun Solaris=8.0

Event History

Mar 7, 2003
CVE Published
via NVD·05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2002-1337?

The severity of CVE-2002-1337 is considered high due to its potential to allow remote attackers to execute arbitrary code.

2

How do I fix CVE-2002-1337?

To fix CVE-2002-1337, update Sendmail to a version later than 8.12.8, or apply the appropriate patches provided by the vendor.

3

What versions of Sendmail are affected by CVE-2002-1337?

CVE-2002-1337 affects Sendmail versions from 5.79 to 8.12.7 inclusive.

4

Can CVE-2002-1337 be exploited remotely?

Yes, CVE-2002-1337 can be exploited remotely through specially crafted email messages manipulating address fields.

5

What type of vulnerability is CVE-2002-1337?

CVE-2002-1337 is a buffer overflow vulnerability, which can lead to arbitrary code execution.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203