CVE-2002-1337: Gentoo Linux

High severity, CVSS 10.0. EPSS: 72.6% chance of exploitation in the next 30 days.

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

Affected products

• Gentoo Linux: version 1.4 only
• HP Alphaserver Sc: any version
• HP HP-Ux: version 10.10 only; version 10.20 only; version 11.00 only; version 11.0.4 only; version 11.11 only; version 11.22 only
• Netbsd Netbsd: version 1.5 only; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only; version 1.6 only
• Oracle Solaris: version 2.6 only; version 7.0 only; version 8 only; version 9 only
• Sendmail Sendmail: before 8.9.3 (fixed in 8.9.3); from 8.10.0, before 8.11.6 (fixed in 8.11.6); from 8.12.0, before 8.12.8 (fixed in 8.12.8)
• Sun Sunos: affected versions not specified; version 5.7 only; version 5.8 only
• Windriver Bsdos: version 4.2 only; version 4.3.1 only; version 5.0 only
• Windriver Platform Sa: version 1.0 only

Published 2003-03-07. Last modified 2026-06-16.