Fluid Attacks Database

Description

Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 13	sendmail	>=0 <8.12.7	8.12.7
debian 14	sendmail	>=0 <8.12.7	8.12.7
debian 12	sendmail	>=0 <8.12.7	8.12.7
debian 11	sendmail	>=0 <8.12.7	8.12.7

Aliases

1. CVE-2002-22612. NVD-2002-22613. OSV-DEBIAN-2002-22614. OSV-2002-22615. SECURITY-TRACKER-CVE-2002-2261

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.