CVE-2002-2261 Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | = 8.9.0 | No fix listed |
| sendmail | = 8.9.1 | No fix listed |
| sendmail | = 8.9.2 | No fix listed |
| sendmail | = 8.9.3 | No fix listed |
| sendmail | = 8.10 | No fix listed |
| sendmail | = 8.10.0 | No fix listed |
| sendmail | = 8.10.1 | No fix listed |
| sendmail | = 8.10.2 | No fix listed |
| sendmail | = 8.11.0 | No fix listed |
| sendmail | = 8.11.1 | No fix listed |
| sendmail | = 8.11.2 | No fix listed |
| sendmail | = 8.11.3 | No fix listed |
| sendmail | = 8.11.4 | No fix listed |
| sendmail | = 8.11.5 | No fix listed |
| sendmail | = 8.11.6 | No fix listed |
| sendmail | = 8.11.7 | No fix listed |
| sendmail | = 8.12-beta10 | No fix listed |
| sendmail | = 8.12-beta12 | No fix listed |
| sendmail | = 8.12-beta16 | No fix listed |
| sendmail | = 8.12-beta5 | No fix listed |
| sendmail | = 8.12-beta7 | No fix listed |
| sendmail | = 8.12.0 | No fix listed |
| sendmail | = 8.12.1 | No fix listed |
| sendmail | = 8.12.2 | No fix listed |
| sendmail | = 8.12.3 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | = 8.12.4 | No fix listed |
| sendmail | = 8.12.5 | No fix listed |
| sendmail | = 8.12.6 | No fix listed |
| debian/sendmail(Debian:12) | < 8.12.7 | 8.12.7 |
| debian/sendmail(Debian:13) | < 8.12.7 | 8.12.7 |
| debian/sendmail(Debian:14) | < 8.12.7 | 8.12.7 |
References
- 7826 third-party-advisory vendor-advisory
- 1005748 patch vdb-entry
- 6548 patch vdb-entry
- www.sendmail.org patch vendor-advisory
- ADV-2009-3539 vdb-entry vendor-advisory
- sendmail-check-relay-bypass(10775) vdb-entry
- oval:org.mitre.oval:def:6892 signature vdb-entry
- oval:org.mitre.oval:def:8512 signature vdb-entry
- Debian Security Tracker CVE-2002-2261 vendor-advisory