CVE-2002-2423: Sendmail

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.

Affected products

• Sendmail Sendmail: version 8.12.0 only; version 8.12.1 only; version 8.12.2 only; version 8.12.3 only; version 8.12.4 only; version 8.12.5 only; …

Published 2002-12-31. Last modified 2026-06-16.