CVE-2002-2261: High severity Sendmail Sendmail vulnerability

Published Dec 31, 2002
·
Updated

Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'checkrelay' function by spoofing a blank DNS hostname.

Affected Software

28 affected components
Sendmail Sendmail=8.9.0
Sendmail Sendmail=8.9.1
Sendmail Sendmail=8.9.2
Sendmail Sendmail=8.9.3
Sendmail Sendmail=8.10
Sendmail Sendmail=8.10.0
Sendmail Sendmail=8.10.1
Sendmail Sendmail=8.10.2
Sendmail Sendmail=8.11.0
Sendmail Sendmail=8.11.1
Sendmail Sendmail=8.11.2
Sendmail Sendmail=8.11.3
Sendmail Sendmail=8.11.4
Sendmail Sendmail=8.11.5
Sendmail Sendmail=8.11.6
Sendmail Sendmail=8.11.7
Sendmail Sendmail=8.12-beta10
Sendmail Sendmail=8.12-beta12
Sendmail Sendmail=8.12-beta16
Sendmail Sendmail=8.12-beta5
Sendmail Sendmail=8.12-beta7
Sendmail Sendmail=8.12.0
Sendmail Sendmail=8.12.1
Sendmail Sendmail=8.12.2
Sendmail Sendmail=8.12.3
Sendmail Sendmail=8.12.4
Sendmail Sendmail=8.12.5
Sendmail Sendmail=8.12.6

Remediation

Patch Available

http://securitytracker.com/id?1005748

Patch Available

http://www.securityfocus.com/bid/6548

Patch Available

http://www.sendmail.org/8.12.7.html

Event History

Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 18, 2007
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2002-2261?

CVE-2002-2261 is considered a medium severity vulnerability as it allows remote attackers to bypass relaying restrictions.

2

How do I fix CVE-2002-2261?

To fix CVE-2002-2261, upgrade to Sendmail version 8.12.7 or later, which addresses this vulnerability.

3

Which versions of Sendmail are affected by CVE-2002-2261?

CVE-2002-2261 affects Sendmail versions 8.9.0 through 8.12.6.

4

What does CVE-2002-2261 allow an attacker to do?

CVE-2002-2261 allows attackers to spoof a blank DNS hostname to bypass email relaying restrictions.

5

Is CVE-2002-2261 a common vulnerability in Sendmail?

Yes, CVE-2002-2261 is a known vulnerability that has been present in several versions of Sendmail, making it a concern for many users.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203