CVE-2002-0906

published 2002-10-04

CVE-2002-0906: Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	sendmail	< sendmail 8.12.5 (bookworm)	sendmail 8.12.5 (bookworm)
sendmail	sendmail	—	—
sendmail	sendmail	—	—
sendmail	sendmail	—	—
sendmail	sendmail	—	—
sendmail	sendmail	>= 0 < 8.12.5	8.12.5
sendmail	sendmail	>= 0 < 8.12.5	8.12.5
sendmail	sendmail	>= 0 < 8.12.5	8.12.5
sendmail	sendmail	>= 0 < 8.12.5	8.12.5

CVSS provenance

nvd 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

osv 7.5 HIGH