CVE-2002-1337

CVE-2002-1337 describes a critical buffer overflow vulnerability in Sendmail versions 5.79 through 8.12.7, specifically affecting how it processes formatted address fields in sender and recipient headers. This flaw allows remote attackers to execute arbitrary code on affected systems, including various distributions of Linux, HP-UX, NetBSD, Oracle, Sun, and Wind River. The vulnerability carries a maximum CVSS score of 10.0, indicating a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB, with multiple proofs-of-concept demonstrating header processing buffer overflows, and it garners significant community discussion.