CVE-2002-2423

Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Sendmail (Sendmail)

References

• http://archive.cert.uni-stuttgart.de/bugtraq/2002/09/msg00267.html
• http://www.iss.net/security_center/static/10153.php
• http://www.securityfocus.com/bid/5770