CVE-2002-2423

Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*
cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*
cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*
cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*
cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*
cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*
cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*

History

20 Nov 2024, 23:43

Type Values Removed Values Added
References () http://archive.cert.uni-stuttgart.de/bugtraq/2002/09/msg00267.html - () http://archive.cert.uni-stuttgart.de/bugtraq/2002/09/msg00267.html -
References () http://www.iss.net/security_center/static/10153.php - () http://www.iss.net/security_center/static/10153.php -
References () http://www.securityfocus.com/bid/5770 - () http://www.securityfocus.com/bid/5770 -

Information

Published : 2002-12-31 05:00

Updated : 2024-11-20 23:43


NVD link : CVE-2002-2423

Mitre link : CVE-2002-2423

CVE.ORG link : CVE-2002-2423


JSON object : View

Products Affected

sendmail

  • sendmail
CWE
CWE-20

Improper Input Validation