CVE-2002-1337

Name	CVE-2002-1337
Description	Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
References	DSA-257

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
sendmail (PTS)	buster	8.15.2-14~deb10u1	fixed
	bullseye	8.15.2-22	fixed
	bookworm, sid	8.17.1.9-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
sendmail	source	woody	8.12.3-5	DSA-257
sendmail	source	(unstable)	8.13.0.PreAlpha4-0
sendmail-wide	source	woody	8.12.3+3.5Wbeta-5.2	DSA-257
sendmail-wine	source	(unstable)	(unfixed)

problem in sendmail 8.12, sarge uses 8.13