Executive Summary

Informations
Name	CVE-2002-2423	First vendor Publication	2002-12-31
Vendor	Cve	Last vendor Modification	2008-09-05

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:N)
Cvss Base Score	6.4	Attack Range	Network
Cvss Impact Score	4.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2423

CWE : Common Weakness Enumeration

id	Name
CWE-20	Improper Input Validation

CPE : Common Platform Enumeration

Type	Description	Count
Application	Sendmail Sendmail cpe:/a:sendmail:sendmail:8.12.6 cpe:/a:sendmail:sendmail:8.12.5 cpe:/a:sendmail:sendmail:8.12.4 cpe:/a:sendmail:sendmail:8.12.3 cpe:/a:sendmail:sendmail:8.12.2 cpe:/a:sendmail:sendmail:8.12.1 cpe:/a:sendmail:sendmail:8.12.0	7

Open Source Vulnerability Database (OSVDB)

id	Description
4747	Sendmail IDENT Overflow Logging Bypass

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/5770
BUGTRAQ	http://archive.cert.uni-stuttgart.de/bugtraq/2002/09/msg00267.html
XF	http://www.iss.net/security_center/static/10153.php

Alert History

Date	Informations
2013-05-11 12:16:20	Multiple Updates