Quantum Secular Labs / Blog / Advisories

CVE-2002-1337: Sendmail: Buffer overflow

CVE-2002-1337 has a CVSS v2 base score of 10.0 (the maximum on that scale) and affects Sendmail, along with 8 other products in NVD’s configuration data. Per its scoring, it can be exploited over the network, without authentication. The scored impact on confidentiality, integrity and availability is the highest available.

Vulnerability description

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Severity breakdown

CVSS v2.0 10.0: AV:N/AC:L/Au:N/C:C/I:C/A:C

Access vector: Network. Exploitable remotely over the network.
Access complexity: Low. No special conditions are required.
Authentication: None. No authentication is needed.
Confidentiality impact: Complete. Total information disclosure.
Integrity impact: Complete. Total loss of integrity.
Availability impact: Complete. Total shutdown of the component.

Underlying weakness

CWE-120: Buffer Copy without Checking Size of Input

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Affected products

Sendmail: before 8.9.3; from 8.10.0 before 8.11.6; from 8.12.0 before 8.12.8
HP Alphaserver Sc: all versions listed by NVD
Gentoo Linux: 1.4 rc1; 1.4 rc2
HP Ux: 10.10; 10.20; 11.00; 11.0.4; 11.11; 11.22
Netbsd: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6
Oracle Solaris: 2.6; 7.0; 8; 9
Sunos: all versions listed by NVD; 5.7; 5.8
Windriver Bsdos: 4.2; 4.3.1; 5.0
Windriver Platform Sa: 1.0