CVE-2002-2034: John Hardin Procmail Email Sanitizer

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments.

Affected products

• John Hardin Procmail Email Sanitizer: version 1.131 only; version 1.132 only

Published 2002-12-31. Last modified 2026-06-16.