CVE-2002-2423 Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.
MediumCVSS 6.4
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | = 8.12.0 | No fix listed |
| sendmail | = 8.12.1 | No fix listed |
| sendmail | = 8.12.2 | No fix listed |
| sendmail | = 8.12.3 | No fix listed |
| sendmail | = 8.12.4 | No fix listed |
| sendmail | = 8.12.5 | No fix listed |
| sendmail | = 8.12.6 | No fix listed |
References
- 20020921 Sendmail logging and short string precision allows anonymous commands/relay mailing-list
- sendmail-ident-logging-bypass(10153) vdb-entry
- 5770 vdb-entry