CVE-2002-0906

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-10-04 · updated 2026-06-16

Description

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.

Affected products

Sendmail: 8.12.0, 8.12.1, 8.12.3, 8.12.4

References

http://www.iss.net/security_center/static/9443.php
http://www.kb.cert.org/vuls/id/814627
http://www.securityfocus.com/bid/5122
http://www.sendmail.org/8.12.5.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2183
http://www.iss.net/security_center/static/9443.php
http://www.kb.cert.org/vuls/id/814627
http://www.securityfocus.com/bid/5122
http://www.sendmail.org/8.12.5.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2183

Get alerted when CVE-2002-0906 or the next vulnerability affects your stack