CVE-2002-2423: Input Validation
Published Dec 31, 2002
·Updated
Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.
Affected Software
7 affected components
Sendmail Sendmail=8.12.3
Sendmail Sendmail=8.12.4
Sendmail Sendmail=8.12.1
Sendmail Sendmail=8.12.5
Sendmail Sendmail=8.12.0
Sendmail Sendmail=8.12.6
Sendmail Sendmail=8.12.2
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Nov 1, 2007
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2423?
The severity of CVE-2002-2423 is categorized as moderate, as it allows remote attackers to prevent IP address logging.
2
Which versions of Sendmail are affected by CVE-2002-2423?
CVE-2002-2423 affects Sendmail versions 8.12.0 through 8.12.6.
3
How do I fix CVE-2002-2423?
To fix CVE-2002-2423, upgrade Sendmail to a version later than 8.12.6.
4
What type of attack does CVE-2002-2423 allow?
CVE-2002-2423 allows attackers to manipulate log entries by sending excessively long IDENT responses.
5
What impact does CVE-2002-2423 have on logging?
CVE-2002-2423 can cause important IP address logging information to be truncated or omitted.