What is CVE-2009-1490?

CVE-2009-1490 is a vulnerability in Sendmail, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-05-05.

Is CVE-2009-1490 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Sendmail

CVE-2009-1490

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.

Vulnerability class: Buffer Overflow

EPSS: 0.126 (95.8th percentile) — read the EPSS interpretation.

Affected products

Sendmail — versions 2.6, 2.6.1, 2.6.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2009-1490?: CVE-2009-1490 is a vulnerability in Sendmail, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-05-05.
Is CVE-2009-1490 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.