{"api_version":"1","generated_at":"2026-07-23T20:30:07+00:00","cve":"CVE-2002-1337","urls":{"html":"https://cve.report/CVE-2002-1337","api":"https://cve.report/api/cve/CVE-2002-1337.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-1337","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-1337"},"summary":{"title":"CVE-2002-1337","description":"Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.","state":"PUBLISHED","assigner":"mitre","published_at":"2003-03-07 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-120","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc","name":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=104679411316818&w=2","name":"http://marc.info/?l=bugtraq&m=104679411316818&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"'HP-UX security bulletins digest [Fwd/sendmail issue]' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cert.org/advisories/CA-2003-07.html","name":"http://www.cert.org/advisories/CA-2003-07.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource"],"title":"CERT Advisory CA-2003-07 Remote Buffer Overflow in Sendmail","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only","name":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Search results","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2003/dsa-257","name":"http://www.debian.org/security/2003/dsa-257","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Debian -- Security Information -- DSA-257-1 sendmail","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-073.html","name":"http://www.redhat.com/support/errata/RHSA-2003-073.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=104678739608479&w=2","name":"http://marc.info/?l=bugtraq&m=104678739608479&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"'[LSD] Technical analysis of the remote sendmail vulnerability' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028","name":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.iss.net/security_center/static/10748.php","name":"http://www.iss.net/security_center/static/10748.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6","name":"ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"text/plain","httpstatus":"404","archivestatus":"404"},{"url":"http://marc.info/?l=bugtraq&m=104673778105192&w=2","name":"http://marc.info/?l=bugtraq&m=104673778105192&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"'sendmail 8.12.8 available' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/398025","name":"http://www.kb.cert.org/vuls/id/398025","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"title":"CERT/CC Vulnerability Note VU#398025","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571","name":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Home - Conectiva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-227.html","name":"http://www.redhat.com/support/errata/RHSA-2003-227.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5","name":"ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"text/plain","httpstatus":"404","archivestatus":"404"},{"url":"http://www.sendmail.org/8.12.8.html","name":"http://www.sendmail.org/8.12.8.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"],"title":"Sendmail - 8.12","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only","name":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Search results","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-074.html","name":"http://www.redhat.com/support/errata/RHSA-2003-074.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950","name":"http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=104678862409849&w=2","name":"http://marc.info/?l=bugtraq&m=104678862409849&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"'GLSA:  sendmail (200303-4)' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P","name":"ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/6991","name":"http://www.securityfocus.com/bid/6991","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"],"title":"Sendmail Header Processing Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only","name":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Search results","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=104678862109841&w=2","name":"http://marc.info/?l=bugtraq&m=104678862109841&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"'Fwd: APPLE-SA-2003-03-03 sendmail' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-1337","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1337","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"1337","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sendmail","cpe5":"sendmail","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T03:19:28.722Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"RHSA-2003:073","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2003-073.html"},{"name":"20030301-01-P","tags":["vendor-advisory","x_refsource_SGI","x_transferred"],"url":"ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P"},{"name":"IY40501","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only"},{"name":"20030303 Fwd: APPLE-SA-2003-03-03 sendmail","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=104678862109841&w=2"},{"name":"RHSA-2003:227","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2003-227.html"},{"name":"6991","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/6991"},{"name":"VU#398025","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/398025"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.sendmail.org/8.12.8.html"},{"name":"DSA-257","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2003/dsa-257"},{"name":"20030304 [LSD] Technical analysis of the remote sendmail vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=104678739608479&w=2"},{"name":"oval:org.mitre.oval:def:2222","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222"},{"name":"RHSA-2003:074","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2003-074.html"},{"name":"CA-2003-07","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.cert.org/advisories/CA-2003-07.html"},{"name":"20030303 sendmail 8.12.8 available","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=104673778105192&w=2"},{"name":"MDKSA-2003:028","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"],"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028"},{"name":"IY40500","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only"},{"name":"sendmail-header-processing-bo(10748)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/10748.php"},{"name":"CSSA-2003-SCO.6","tags":["vendor-advisory","x_refsource_CALDERA","x_transferred"],"url":"ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6"},{"name":"CSSA-2003-SCO.5","tags":["vendor-advisory","x_refsource_CALDERA","x_transferred"],"url":"ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5"},{"name":"CLA-2003:571","tags":["vendor-advisory","x_refsource_CONECTIVA","x_transferred"],"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571"},{"name":"NetBSD-SA2003-002","tags":["vendor-advisory","x_refsource_NETBSD","x_transferred"],"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc"},{"name":"HPSBUX0302-246","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=104679411316818&w=2"},{"name":"20030303 Remote Sendmail Header Processing Vulnerability","tags":["third-party-advisory","x_refsource_ISS","x_transferred"],"url":"http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950"},{"name":"IY40502","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only"},{"name":"20030304 GLSA:  sendmail (200303-4)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=104678862409849&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2003-03-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-05-21T00:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"RHSA-2003:073","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2003-073.html"},{"name":"20030301-01-P","tags":["vendor-advisory","x_refsource_SGI"],"url":"ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P"},{"name":"IY40501","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only"},{"name":"20030303 Fwd: APPLE-SA-2003-03-03 sendmail","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=104678862109841&w=2"},{"name":"RHSA-2003:227","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2003-227.html"},{"name":"6991","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/6991"},{"name":"VU#398025","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/398025"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.sendmail.org/8.12.8.html"},{"name":"DSA-257","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2003/dsa-257"},{"name":"20030304 [LSD] Technical analysis of the remote sendmail vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=104678739608479&w=2"},{"name":"oval:org.mitre.oval:def:2222","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222"},{"name":"RHSA-2003:074","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2003-074.html"},{"name":"CA-2003-07","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.cert.org/advisories/CA-2003-07.html"},{"name":"20030303 sendmail 8.12.8 available","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=104673778105192&w=2"},{"name":"MDKSA-2003:028","tags":["vendor-advisory","x_refsource_MANDRAKE"],"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028"},{"name":"IY40500","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only"},{"name":"sendmail-header-processing-bo(10748)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/10748.php"},{"name":"CSSA-2003-SCO.6","tags":["vendor-advisory","x_refsource_CALDERA"],"url":"ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6"},{"name":"CSSA-2003-SCO.5","tags":["vendor-advisory","x_refsource_CALDERA"],"url":"ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5"},{"name":"CLA-2003:571","tags":["vendor-advisory","x_refsource_CONECTIVA"],"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571"},{"name":"NetBSD-SA2003-002","tags":["vendor-advisory","x_refsource_NETBSD"],"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc"},{"name":"HPSBUX0302-246","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=104679411316818&w=2"},{"name":"20030303 Remote Sendmail Header Processing Vulnerability","tags":["third-party-advisory","x_refsource_ISS"],"url":"http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950"},{"name":"IY40502","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only"},{"name":"20030304 GLSA:  sendmail (200303-4)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=104678862409849&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-1337","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"RHSA-2003:073","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2003-073.html"},{"name":"20030301-01-P","refsource":"SGI","url":"ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P"},{"name":"IY40501","refsource":"AIXAPAR","url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only"},{"name":"20030303 Fwd: APPLE-SA-2003-03-03 sendmail","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=104678862109841&w=2"},{"name":"RHSA-2003:227","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2003-227.html"},{"name":"6991","refsource":"BID","url":"http://www.securityfocus.com/bid/6991"},{"name":"VU#398025","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/398025"},{"name":"http://www.sendmail.org/8.12.8.html","refsource":"CONFIRM","url":"http://www.sendmail.org/8.12.8.html"},{"name":"DSA-257","refsource":"DEBIAN","url":"http://www.debian.org/security/2003/dsa-257"},{"name":"20030304 [LSD] Technical analysis of the remote sendmail vulnerability","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=104678739608479&w=2"},{"name":"oval:org.mitre.oval:def:2222","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222"},{"name":"RHSA-2003:074","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2003-074.html"},{"name":"CA-2003-07","refsource":"CERT","url":"http://www.cert.org/advisories/CA-2003-07.html"},{"name":"20030303 sendmail 8.12.8 available","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=104673778105192&w=2"},{"name":"MDKSA-2003:028","refsource":"MANDRAKE","url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028"},{"name":"IY40500","refsource":"AIXAPAR","url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only"},{"name":"sendmail-header-processing-bo(10748)","refsource":"XF","url":"http://www.iss.net/security_center/static/10748.php"},{"name":"CSSA-2003-SCO.6","refsource":"CALDERA","url":"ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6"},{"name":"CSSA-2003-SCO.5","refsource":"CALDERA","url":"ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5"},{"name":"CLA-2003:571","refsource":"CONECTIVA","url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571"},{"name":"NetBSD-SA2003-002","refsource":"NETBSD","url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc"},{"name":"HPSBUX0302-246","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=104679411316818&w=2"},{"name":"20030303 Remote Sendmail Header Processing Vulnerability","refsource":"ISS","url":"http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950"},{"name":"IY40502","refsource":"AIXAPAR","url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only"},{"name":"20030304 GLSA:  sendmail (200303-4)","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=104678862409849&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-1337","datePublished":"2004-09-01T04:00:00.000Z","dateReserved":"2002-12-03T00:00:00.000Z","dateUpdated":"2024-08-08T03:19:28.722Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2003-03-07 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-120","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionEndExcluding":"8.9.3","matchCriteriaId":"C6D3A2C0-B076-4351-8085-DA3A37117453"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionStartIncluding":"8.10.0","versionEndExcluding":"8.11.6","matchCriteriaId":"5AE239ED-94EE-40C7-9133-D1F4779A2E0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionStartIncluding":"8.12.0","versionEndExcluding":"8.12.8","matchCriteriaId":"64788C22-64F9-41DB-A4C2-BFCD6DBD8EE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:alphaserver_sc:*:*:*:*:*:*:*:*","matchCriteriaId":"5556D665-3792-4832-9EEE-D1122C9BF98E"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3DB008E3-9A00-4D28-8826-A9FCC9F65314"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"28A10F5A-067E-4DD8-B585-ABCD6F6B324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"69C7B4A8-E8D0-425C-B979-17E85458B0C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0F538D2B-1AE1-4766-830E-CF7999181128"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*","matchCriteriaId":"722A52CF-4C6E-44D3-90C4-D2F72A40EF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*","matchCriteriaId":"4F864AD7-53A2-4225-870F-062876CE45DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:bsdos:4.2:*:*:*:*:*:*:*","matchCriteriaId":"18B197B3-AA07-440F-A733-80B7CE07B3D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:bsdos:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42761237-75A9-4E8C-8202-3CA3EB3D1ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:bsdos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7FAFD2BC-330C-4357-B8C7-F451C6282869"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:platform_sa:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2151D858-F6D4-472E-9CC7-A8EA26E27CC7"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"1337","Ordinal":"1","Title":"CVE-2002-1337","CVE":"CVE-2002-1337","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"1337","Ordinal":"1","NoteData":"Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.","Type":"Description","Title":"CVE-2002-1337"},{"CveYear":"2002","CveId":"1337","Ordinal":"2","NoteData":"2004-09-01","Type":"Other","Title":"Published"},{"CveYear":"2002","CveId":"1337","Ordinal":"3","NoteData":"2010-05-20","Type":"Other","Title":"Modified"}]}}}