Vulnerability in Sendmail

CVE-2002-0906

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.

EPSS: 0.044 (90.3th percentile) — read the EPSS interpretation.

Affected products

  • Sendmail — versions 8.12.0, 8.12.1, 8.12.3
  • N/a — versions n/a

References