CVE-2002-0906 Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a....
HighCVSS 7.5
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | = 8.12.0 | No fix listed |
| sendmail | = 8.12.1 | No fix listed |
| sendmail | = 8.12.3 | No fix listed |
| sendmail | = 8.12.4 | No fix listed |
| debian/sendmail(Debian:12) | < 8.12.5 | 8.12.5 |
| debian/sendmail(Debian:13) | < 8.12.5 | 8.12.5 |
| debian/sendmail(Debian:14) | < 8.12.5 | 8.12.5 |
References
- sendmail-dns-txt-bo(9443) patch vdb-entry vendor-advisory
- VU#814627 third-party-advisory us-government-resource
- 5122 vdb-entry
- www.sendmail.org
- oval:org.mitre.oval:def:2183 signature vdb-entry
- Debian Security Tracker CVE-2002-0906 vendor-advisory